> Well web sandboxing for one, and running opengl through your terminal for another. Sharing OpenGL contexts is about the opposite of sandboxing. It's unsafe.

> Well web sandboxing for one, and running opengl through your terminal for another. Sharing OpenGL contexts is about the opposite of sandboxing. It's unsafe. And you can run OpenGL apps from your terminal just fine? > Containerization seems like a no-brainer to me since a) sandboxing naturally follows, But it's a sandboxing that isn't useful on a Desktop machine. A mail app which sees a completely different container filesystem than my word processor does not improve my life. > b) it's a developer's heaven in terms of deployment, development, and testing Except it's not, because OS X on servers is dead and gone, so what I'd really need is a container that works on my server, aka a Linux server aka I need a VM locally because it's not like OS X is ever going to be LXC compatible. A container I can only use on my dev box isn't worth beans. > c) mac os x is now the only major OS in existence without any containerization capabilities controlable by anyone but apple. I get that Docker has grabbed a lot of hype by reinventing jails to be venture capital compatible, but honestly, for OS X it makes absolutely no sense whatsoever.