Even though most of our users deliver software to us as Docker containers, we don’t use Docker to run them. Docker is great, but we’re high-density multitenant, and despite strides, Docker’s isolation isn’t strong enough for that.

So, instead, we transmogrify container images into Firecracker micro-VMs. Let’s demystify that….