> Imagine if containers were actually vm-level safe? The performance and operational simplicity of a container with the security of a VM. As far as I know, the

> Imagine if containers were actually vm-level safe? The performance and operational simplicity of a container with the security of a VM. As far as I know, the order of magnitudes of container security flaws from memory safety is the same as security flaws coming from namespace logic issues, and you'll have to top that with hardware issues. I'm sorry but rust or not, there will never be a world where you can 100% trust running a malware. > Fuschia [...] is unlikely to give us the memory safety that a Rust kernel would Well being micro kernel make it easier to migrate bits by bits, and not care about ABI