yeah but they don't get the same sort of commercially-baked advertising - which will not mention the issues and make you believe it's the next big thing. also,

yeah but they don't get the same sort of commercially-baked advertising - which will not mention the issues and make you believe it's the next big thing. also, jail has an arguably better implementation. containers, jails, etc. are useful for the right scenarios of course. But I question their usefulness as "vm-replacements". For the reason tptacek presented the long list of similar possibilities. It's complex and thus it's hard to secure.