Hi Young, I was traveling so not sure if you received a response to your request for a gVisor comparison. I’ll bring to your attention a webinar on Sandboxed Containers that Rancher Labs did in February of 2019. He compared different sandboxed container approaches -- Kata, gVisor, IBM Nabla. I found it very informative. I wrote up my notes from the webinar here in case it’s easier to read my notes than listen to an hour+ long webinar 😊. I also added some comments: https://docs.google.com/document/d/11L48VVdXYZS9sd-byzHGcRqWOl0FoGOU12z-xFtf... Please let me know if you have additional questions, Margaret From: 하영 <youngha@knu.ac.kr> Sent: Thursday, September 5, 2019 1:21 AM To: kata-dev@lists.katacontainers.io Subject: [kata-dev] a couple of questions about Kata [http://mail.knu.ac.kr:80/mail/webmailreconf.public.do?26641280] Hi all, I got a couple of questions: 1. Kata-container provides strong isolation through lightweight VM, I want more details about security perspective. Does Kata container have a solution to container threat models? ( ex) container escape, etc. ) 2. What is the strength of Kata in comparison to gVisor? Young