Hacker News Reader

Why is this better than just using Docker?

Kernel level isolation.

Functionality of criu built in so you can get rewind, pause, in an accessible manner.

Embeddable (you can write JavaScript to programmatically use an isolated environment)

Native performance on multiplatform + consistent experience across platforms.

This sounds great. By the way, does "kernel-level isolation" mean "you have to allocate a chunk of RAM to this"? Or is that CPU-level?

EDIT: Ah, looks like it means "runs its own kernel", not "isolates at the kernel" like Docker does.

yes, separate kernels + virtualized hardware via hypervisor.

containers are built on linux primitives & so shares the kernel.

Excellent, thank you. This is definitely useful to me.