Yes, we initially used containers. We think VMs are a more secure form of isolation, which is arguable. We also want users to have the ability to run apps based

Yes, we initially used containers. We think VMs are a more secure form of isolation, which is arguable. We also want users to have the ability to run apps based on a variety of operating systems and kernels. Portal apps themselves can use containers of course. For example, a game server app might run each game process in a separate container within its own VM.