faineance / vessel

Toy container runtime, capable of running docker images

vessel

Container runtime, capable of downloading and running docker images

( on hold because unsharing CLONE_NEWPID implies CLONE_THREAD which cannot be unshared because even non threaded ghc has multiple os threads for the I/O manager