> Using your example that "zones and SmartOS" are preferable to "SELinux and Linux Containers"....that's not going to happen. That has actually already taken p

> Using your example that "zones and SmartOS" are preferable to "SELinux and Linux Containers"....that's not going to happen. That has actually already taken place, and is taking place. There is unlikely to be one winner-take-all. Following the money does not mean that the application cannot be programmed from the ground up to support SmartCards and roles, or that it has to be full of security holes. > I suspect if enough talented, security minded engineers descended as contributors for docker, rkt, etc. Depends on what is under etcetera. Docker and rkt are not the Silver bullets everyone who has not gotten busted by them think they are, they are just a trend. With all of those you instantenously lose lifecycle management, because they are just images of massive file dumps, not images of software and configuration installed with packages. When you use Solaris zones in SmartOS, Docker and rkt become completely superfluous, because you suddenly get a fully working yet completely isolated UNIX server, running at the speed of bare metal no less. Add some OS packages on top of that, make them into an image for imgadm(1M), and in few seconds you're done. What does one need Docker for in that scenario? And I should certainly hope that perfect is the enemy of good, because life has taught me, the hard way, that good isn't good enough. I absolutely hate being woken up during the night because of an incident, and will go out of my way to get as close to perfect as possible in order to be able to sleep through the night.