​Google open sources gVisor, a sandboxed container runtime

We're using containers now. But securing them? Well, that's another matter. And Google has an answer with its newly open-sourced gVisor, which runs containers in a secured sandbox.