kubav·6 年前·議論It is easier for developer but risky for end user. Docker runs as root and you have to trust application developer to use latest security patches for all dependencies.