[udev4096]

gVisor is solid but it comes with a perf hit. Plus, it does not work on every image

[yencabulator]

FWIW the performance loss got a lot better in ~2023 when the open source gVisor switched away from ptrace. (Google had an internal non-published faster variant from the start.)