Project
Open-source runtime that runs containers and pods in lightweight virtual machines for hardware isolation, compatible with OCI and Kubernetes.
DepthFirst published a working Ubuntu 26.04 exploit for CVE-2026-80521 on 2026-09-22, before distribution kernels carried a fix, according to a dev.to post. The flaw sits in AF_UNIX, which default Docker and Kubernetes seccomp profiles permit.
Reality
Kubernetes' project blog says NVMe-backed node swap, generally available since v1.34, packed up to 3x more pods onto memory-bound nodes in benchmarks. The gain comes from paging out memory that agent sandboxes hold idle between prompts, so swap-based budgets depend on how much of each pod is truly dormant.
Reality
FTL ran an unmodified Rust HTTP server on its v0.0.1 user-space kernel in September, with no hardware virtualization underneath. Its claim of VM-grade isolation depends on the small shared kernel that every container still calls into.
Reality
Apple Container on macOS 26 boots a lightweight VM for each container, where Podman runs them all in one shared Fedora VM. Leaving Podman gets each container its own kernel boundary and moves the VM boot cost onto every run.
Reality
The kernel fixed CVE-2026-80521 on August 6. Ubuntu has shipped nothing for 22.04, 24.04 or 26.04, including its AWS, Azure and GCP kernels, and DepthFirst's exploit for 26.04 went public on September 22.
Reality
A Linux guest under Apple's container CLI cannot reach Metal. So the setup that works keeps the app in a Debian machine and calls Ollama on the Mac at 192.168.64.1. One run there measured 45.2 tok/s.
Reality