Hey Solomon! I'm glad you're making libcontainer, but I'm still not sure what Sandstorm would gain from it. At the end of the day, most of the work going into

Hey Solomon! I'm glad you're making libcontainer, but I'm still not sure what Sandstorm would gain from it. At the end of the day, most of the work going into libcontainer is all about making containerization totally transparent to the app and supporting a wide range of Linux platform features. These are obviously key features of Docker and useful to many other uses of containers, but simply not a goal for us. E.g. I see selinux and apparmor mentioned in libcontainer's code, but Sandstorm's security model does not need nor want them. For our case, a couple dozen syscalls to set up our container is really all we need. Sandstorm's own code base actually even contains three different components that set up different kinds of containers, but we don't share code between them because there's just not much worth sharing.