Docker 容器与虚拟机：架构、性能、配置与安全比较研究
原标题：Docker Containers vs. Virtual Machines: A Comparative Study of Architecture, Performance, Configuration, and Security
AI 摘要
这篇 arXiv cs.SE 论文对 Docker 容器与虚拟机进行了文献综述式比较，覆盖架构、配置与生命周期管理、性能、可扩展性和安全性。研究指出容器通常启动更快、镜像更小、密度更高且接近原生性能，而虚拟机提供独立内核和更强隔离边界。作者认为效率与隔离是设计权衡，容器运行在加固虚拟机内的混合架构常是云和多租户系统的实用平衡方案。
正文节选
Docker Containers vs. Virtual Machines: A Comparative Study of Architecture, Performance, Configuration, and Security Abstract Modern application platforms must isolate workloads while preserving deployment speed, portability, resource efficiency, and security. Virtual machines (VMs) and Docker containers address this requirement at different abstraction layers: VMs virtualize hardware and run independent guest operating systems, whereas containers isolate processes while sharing the host kernel