Comment by xyzzy_plugh

I've been using gVisor with Docker (or Docker-compatible runtimes) via runsc for years.

It isn't obvious to me what this does that we haven't been able to do for some time now.