Less Overhead, Strong Isolation - Running Containers in Minimal Specialized Linux VMs

Argues that traditional containers share the host kernel (weak isolation) while microVMs add management overhead, and proposes running containers inside stripped-down Linux VMs that contain only what the application needs, managed directly by urunc without auxiliary layers.