Disclosure: I work at Hyper.sh
Think about why all public clouds are built with virtualization technology. Multi-tenants require strong isolation, which virtualization promises. Therefore, if we could get strong isolation in container, we can build public cloud with container.
Sure, it is incredibly bloaty.
But so is the way, say, npm works.
Bloaty apps often provide a ton of programmer convenience.
And history tells us that programmer convenience usually wins.
Docker style development already usually means bundling tons of redundant dependencies everywhere.
Let's just take that further, and hold your nose.
I agree with you we need this, though. I’m frequently running CI in Docker, and this makes launching a new container from CI a pain.
Google is also working on a shim that intercepts system calls in userspace to simulate having more priveledges.
But user mode Linux is a real full kernel!
Limtations (not supported):
- docker exec
- docker swarm