zlacker

would you be OK with a -hardened- with default profiles docker containers one?

>>tough+(OP)
I don't understand what you mean? Can you clarify?

>>appcyp+l1
sorry i meant to ask simon directly if they require a non-docker solution

im working on a wrapper that lets you swap runtimes and my first implementation is mostly a wrapper around docker containers

planning to add firecracker next

will explore adding microsandbox too cool stuff!

>>tough+k8
My ideal solution is non-Docker purely because I build software for other people to use. I don't want to have to tell my users "step 1: install Docker" if I can avoid it.

>>simonw+vq
that does make sense, sadly firecracker seems to be mostly relegated to linux for now so there's no good multi-arch story i'm aware of