was hoping to find at least one “cmon this is easy to avoid with X thing in the kernel/OS” info nugget dropped
I want my containers to be able to run work without other containers spying on them (already hard thanks to timing attacks).
This IPC channel only works if both containers are collaborating together. I don't think you can use it to spy on my container if my container isn't actively participating.
The article does mention wanting to coordinate across multiple identical processes running on the same node in a wide variety of environments as the motivator.
So maybe it should be a feature, not a bug :)