Kieran's opinionated (and probably slightly dumb) nix config

prattle: register gVisor (runsc) as a docker runtime master

Userspace-kernel sandbox alternative to Kata for kloe's sandbox; robust with docker's resource/interactive flags where Kata's runtime-rs wedges.


+5
1 changed file