kubav·6年前·讨论It is easier for developer but risky for end user. Docker runs as root and you have to trust application developer to use latest security patches for all dependencies.