英國超市將巧克力鎖進防盜盒阻止「訂單式」偷竊
Credit: NASA infographic
，这一点在快连下载安装中也有详细论述
The Winslow pub closed last month after serving pints to Everton players, managers and fans for 140 years
Defense in depth on top of gVisorgVisor gives you the user-space kernel boundary. What it does not give you automatically is multi-job isolation within a single gVisor sandbox. If you are running multiple untrusted executions inside one runsc container, you still need to layer additional controls. Here is one pattern for doing that: