[himom]

If a container system were formally-proven to provide all of these:

- hard limits, priorization and accounting metrics of all resources, incl.: IO, storage, compute, mem, net, kernel structures

- provable isolation / no side-channel leaks

- SELinux

- Live migration of processes and storage to different hosts, suspend/resume

- Type 4 hypervisor containers for different kernels, OSes, etc. configured and managed seamlessly with the same API

Then and only then can the jumble and complexity of containers running on hypervisors go away and be more like SmartOS with an ability to run bare-metal without losing devops flexible capabilities of running T4 hypervisors under everything.

[yjftsjthsd-h]

Okay, quick search failed me: what is a type 4 hypervisor?