I'm picking the eyes out the article here but I had to twitch at this ... > Linux containers were not built to be secure isolated sandboxes (like Solaris Zones

I'm picking the eyes out the article here but I had to twitch at this ... > Linux containers were not built to be secure isolated sandboxes (like Solaris Zones or FreeBSD Jails). Instead they’re built upon a shared kernel model ... Solaris Zones and BSD Jails both use a shared kernel. And I'd bet you they were far from perfect in security isolation. Now it may be true that security wasn't Linux containers prime reason for being but we have an existence proof that they can be made secure enough -- anyone can get a trial Openshift container for the price of a login.