Containers

redpill me on kubernetes and docker

what's the difference between containers (and their orchestrators) and old school VMs/hypervisors?

>>21
It is much easier to verify a single runtime, than a thousands of programs running from it. That is why Java is more secure that C/C++. And security is all about not using C++ and PHP.

there's a reason JRE updates so often

That is because they add unneeded bells and whistles, including backdoors for special agencies, which are used to catch paedophiles. Had they stuck with the first version of JRE, it would be perfectly bugless today. But they have to modify it each year, adding more bugs.