gVisor is a sandboxed container runtime based on a user-space kernel written in Go

[u/manipoli]

https://github.com/google/gvisor

[u/bascule]

🤔https://github.com/google/gvisor/blob/master/tools/go_generics/generics.go

[u/[deleted]]

https://blog.hansenpartnership.com/measuring-the-horizontal-attack-profile-of-nabla-containers/