I think 'zero user' is right, there just isn't any concept of users or permissions. its really moving the classic OS resource sharing interface to the hypervis

I think 'zero user' is right, there just isn't any concept of users or permissions. its really moving the classic OS resource sharing interface to the hypervisor. that's where the storage and network comes from. given that, what machinery do you need to run just one application? maybe a little filesystem, a tcp stack, interfaces to manipulate threads and kernel locks. that's what gets packaged up with your application into a bootable VM