Right, but if I'm only running my own code, I probably don't care about that, right?
I think one day we will look back how insane it is that our programs are not isolated. Why does every program I run need access to my SSH keys?
There's also ignite which works with firecracker: https://github.com/weaveworks/ignite
If you're more interested in integrating with Firecracker into your own systems - come to the session because I'm covering this in detail.
Weaveworks is now working on a new tool to create K8s clusters where each node is a microVM - Richard Case will be doing a demo of that, and it's super fast. It's for a Telco customer they have, so it's a real use-case, not just shiny tech, so should score extra points, right?
So if you have workflows which that you're struggling to make work in a container, without root, a microVM gives you a full environment, where you can do whatever you want.
Of course, we are covering all this in the live-stream, see the link at the end of the repo!