ParentFull threadjakon89·1 container per VM? What's the point? If you can bypass container sandbox it's very likely that you can do the same with VM.View on HN