[mytummyhertz]

author here. hi world!

[ak217]

Hi Jesse! We got an audit from you last year (I was the one who pushed to get you to specifically look at our PaaS containerization). As a result I spent a while wrangling with Ubuntu LXC unprivileged containers, and now I know more about cgmanager than I wanted to.

Glad to see you've added a lot of detail to your research. It's very necessary!

[mytummyhertz]

:D

[vishvananda]

Very thought-provoking whitepaper. As someone who has been working on securing containers for the past year or so, it gave me some additional avenues to pursue.

[mytummyhertz]

awesome! glad to hear :D

[sbierwagen]

.

[mytummyhertz]

that's a weird way to spell hilarious

edit: (original comment this was in reply to said 'that's an unfortunate username')