Hacker News Reader

Oracle is also working on a simpler container runtime that was discussed recently: https://news.ycombinator.com/item?id=14705888

Why not just use singularity?

You don't get famous for installing software that already exists.

So basically a chroot jail running a process as an unprivileged user.

Cool new tech!

Yes, plus a network namespace with its own IP and limits to memory/CPU/IO.

Seems very cool, but limited to compiled software if I read it correctly?

An interpreted program is just a compiled program (the interpreter) that reads a few text files.

Smith: A microcontainer builder