AI Agent 沙箱怎么选？我们把 runc、vArmor 和 Kata 跑了 30 轮
在 104 线程 Linux 物理机上实测 runc、runc + vArmor 与 Kata QEMU：Kata 用近一倍启动时间和数百 MiB 内存换独立内核，vArmor 则以接近 runc 的成本收紧行为边界。
Topic
#container-runtime
2 篇笔记
Launching a million sandboxes per second in constant time
They say that in the future, everyone will have their own sandbox company for 15 minutes. Let's make that simpler, here's exactly how I buil...