Edera for Containers
Container security / workload isolation platformA container runtime layer that gives every containerized workload its own hardware-backed sandbox by running it as a guest on a Type-1 hypervisor, eliminating shared kernel state between containers on a node.
- Type-1 hypervisor with a memory-safe Rust control plane
- Per-workload micro-VM isolation instead of a shared Linux kernel
- Roughly 5% performance overhead versus standard containers
- Full Kubernetes compatibility with no syscall restrictions