2 ms·

Ah, I see what you’re saying. Basically, Darwin doesn’t support cgroups, so Docker runs Linux in a VM to get that.

• devmor 2y ago
  I don't think it supports userland namespaces either, which is another important part of container isolation.
  • saagarjha 2y ago
    It has partial namespaces support for the iOS simulator.