What is safer to use in the DC: hypervisor or containers?

Experts for a long time can not agree on which of the two technologies is more secure. If you do not take into account the generally accepted dogma, "a virtual machine will always be more reliable," and to carry out the most objective research, the answer may surprise you. The biggest vulnerability of the compilers is the Docker, which uses libcontainers as the basis.

The basic rule is the following: configure both the server and the container identically. Others are as follows:

- Do not use privileges.

- Do not use root authority wherever is possible.

- Treat root rights in the container as if they were operating outside of it.

Another problem is the fact that applications for creating containers are produced by almost everyone, who is not lazy. Using an application from an untested developer, you run the risk of getting a Trojan. It is important to convey to the staff the idea that you can not just download any popped applications.

So what to choose - VM or containers? 

If you want to run multiple copies of the same application, say MySQL, then use the container. If you need a lot of flexibility when working with multiple programs - use a virtual machine. So, we will summarize:

- It is necessary to run multiple applications on a small number of servers? In this case, you will probably use containers.

- Virtual machines will be better solution to run multiple applications or support different operating systems .

- I believe most of us will use containers together with virtual machines both in the clouds and in their own data center. Indeed, the economies of scale opened by containers are too significant to be ignored. And virtual machines still have many advantages.

As we grow in containerization technology, we are waiting for a future where containers and virtual machines together will constitute a flexible and portable cloud environment.