[eecc]

You mean cgroups, or zones don’t you? Docker (was, last time I heard) a security disaster, not generating robust layer hashes, lacking user isolation, and plenty just running as root...

[giantrobot]

There's more to containers on Linux than just Docker.

[ampdepolymerase]

To be fair you need to go to the hypervisor level (like Firecracker) to get any decent level of sandboxing.