If you need more isolation than is available in regular Docker containers, take a look at some of the alternative container runtimes: https://landscape.cncf.io

If you need more isolation than is available in regular Docker containers, take a look at some of the alternative container runtimes: https://landscape.cncf.io/grouping=landscape&landscape=container-runtime https://landscape.cncf.io/grouping=landscape&landscape=conta... I also found both of these articles illuminating: https://cloudplatform.googleblog.com/2018/05/Open-sourcing-gVisor-a-sandboxed-container-runtime.html https://cloudplatform.googleblog.com/2018/05/Open-sourcing-g... https://cloudplatform.googleblog.com/2018/05/Exploring-container-security-Isolation-at-different-layers-of-the-Kubernetes-stack.html https://cloudplatform.googleblog.com/2018/05/Exploring-conta...