do standard Docker vulnerabilities reside in this engine too?

[jdavidthomson]

I know that Docker has some bugs for RCE and other security issues. Does this engine end up being vulnerable to the same issues as stock Docker? I'm aware that it may introduce its own set of vulns, but i'm most concerned with finding a way to use docker images without exposing myself to dockers weaknesses.

Thanks!

[pmorjan]

Hi, runq is a runtime for the standard Docker engine. Therefore vulnerabilities of Docker (and runc) also apply but at a different layer. Qemu and the guest kernel build an isolation layer between application and host but docker is still used to launch the VM as a container.