3 ms·

I'd say that article compares WebAssembly to Docker/moby/other container runtimes, not k8s.

• joshuanapoli 5y ago
  Even so, the scope is different. I don’t use WebAssembly to define networks. Limiting privilege within the WebAssembly runtime is weaker than limiting it at the OS namespace.
  • folex 5y ago
    It depends on specific WASM runtime implementation, but usually you have to be explicit about allowing each syscall.