[wmf]

Yeah, but if you use containers you have to suffer the indignity of the creat() system call. These seem like the smallest possible objections.

[haberman]

You are assuming that our only options are "x86 hardware ring-0" or "Linux system call interface." Both are crufty in their own ways, but more importantly, neither of these was designed to be this. The right answer might be an interface that is designed with containerization in mind.

[bogomipz]

Can you explain why the creat() sys call lack dignity and how that relates to containers?

[wmf]

That was just a joke. I think haberman is spot on that both x86 and Unix are crufty in their own ways and thus cruftiness isn't a good metric to judge these abstractions on.

[bogomipz]

Oh hah, that's funny now I feel silly :)