Earlier quoted context omitted.
> Why do I have to elaborate? Because some of us have never heard of devcontainers as a named concept with its own spec until now. I've been running my dev servers inside containers for a long time now (using JetBrains IDEs!), but have never heard of this before. > It is well known that a container offers a sandbox and process isolation. No, actually, it's well known that containers don't do that. It's one of the fir…
> security isn't one of them Oh but it is. If there is harmful data-stealing software running in the container, it will remain isolated to the container. And if the kernel is shared with the host, that's a read-only share.
And what protects the production server when you deploy the evil packages?