I was initially very thrilled about LXD (lexdee) when they made the initial announcement - because it specifically said [1]: "We’re working with silicon compan

I was initially very thrilled about LXD (lexdee) when they made the initial announcement - because it specifically said [1]: "We’re working with silicon companies to ensure hardware‐assisted security and isolation for these containers, just like virtual machines today. We’ll ensure that the kernel security cross‐section for individual containers can be tightened up for each specific workload. " That was the thing that made it special, but later this capability stopped being mentioned and probably isn't planned anymore. In the meantime, one could look at Kata Containers or AWS firecracker. [1]: https://www.ubuntu.org.cn/cloud/lxd https://www.ubuntu.org.cn/cloud/lxd