OK, so "containers" were invented so every program could have its own special set of operating system packages. This resulted in hugely bloated memory consumption, of course. Then each package could be run in its own virtual environment for isolation.
But most of the containers held the same operating system packages anyway. So memory de-deduplication was developed to reduce the bloat. Then flaws in memory de-duplication broke the isolation.
There's something very wrong with this attempt to fix the problem by adding more layers.
But most of the containers held the same operating system packages anyway. So memory de-deduplication was developed to reduce the bloat. Then flaws in memory de-duplication broke the isolation.
There's something very wrong with this attempt to fix the problem by adding more layers.