https://github. com/herd-core/herd Lately, I have been trying to understand the security aspect of docker containers, and what I have realized is that all docker containers share the host's kernel. Any zero day vulnerability in the kernel can be used to gain access to the host os.
Source: [Hacker News](https://news.ycombinator.com/item?id=49485801)