[matheusmoreira]

Because that means you are sharing kernel with the sandboxed agent. Virtualization presents an infinitely smaller attack surface.

[hwc]

If there is any attack surface within a properly-configured container, that's a kernel bug, right?

[matheusmoreira]

Probably. If I remember correctly, containers on Linux are implemented using the kernel's namespaces. The same ones which became famous for the vulnerabilities they surfaced in previously unexercised code.

[croes]

Then use SmolVM

[matheusmoreira]

I'm already using virtdev, my own solution built on top of QEMU.