Nabla containers: a new approach to container isolation

nabla-containers.github.io

5 pointsingve3 comments

They are down to nine system calls, perhaps they can "pledge" the rest away after the container bootstraps? I am thinking of what OpenBSD has been designing:

https://man.openbsd.org/pledge.2

I read that as...never mind.

Yeah. That name is ..... unfortunate

Reply on news.ycombinator.com