The exciting thing here seems to be cgroups v2 coming out from behind a development flag. The new design seems to be dramatically easier to understand and just plain better. I wonder how long it will take LXC/Docker et Al to make use of them to improve their userspace offerings? It sounds like the security model could now be good enough for shared hosting using cgroups to become a reality.