gVisor also has a complete userspace networking stack that you can pull in, which makes it a lot easier to do some neat things like run an HTTP server responding to packets intercepted via eBPF and sent to an AF_XDP socket, which would otherwise be a pain.
Finally. All I want for Christmas is a 5K, HDR, 120Hz display. I'm managing with 4K, 120Hz, and scaling to 2560x1440 in Mac OS, but with the latter option I lose HDR. I can't give up 120Hz after getting used to it on all my devices.
> I'd love to be able to run rootless quadlets within the system session.
Likewise. I'd also like to be able to run rootless quadlets with the DynamicUser= option. DynamicUser= has been a great way to restrict privileges for system services, and it just doesn't fit with podman right now.