>we invented containers in part as a way to mitigate the consequences of failing to grant minimum privilege Also because it's extremely difficult to grant mini

>we invented containers in part as a way to mitigate the consequences of failing to grant minimum privilege Also because it's extremely difficult to grant minimum privilege on your typical general-purpose OS today. Spawn a new process and the default is that it has all the same authority that you do - it takes a lot of work to dial that down. This is typically inverted in a capability system: the program only has the authority that you give it.