LXer: diff -u: What's New in Kernel Development
 

Published at LXer:

Containers are very tricky to implement. Trying to isolate sets of resources from each other completely, so that they resemble a discrete system, and doing it in a secure way, has to be addressed on a feature-by-featurebasis, with many caveats and uncertainties.

Read More...