Kubernetes is our generation's Multics
So the basic problem with *nix is its permission model.  If we had truly separable security&#x2F;privilege&#x2F;resource domains then Linux wouldn&#x27;t have needed containers and simple processes and threads could have sufficed in place of Borg&#x2F;docker&#x2F;Kubernetes.<p>There&#x27;s a simpler and more powerful security model; capabilities.  Capabilities fix 90% of the problems with *nix.<p>There&#x27;s currently no simple resource model.  Everything is an ad-hoc human-driven heuristic for allocating resources to processes and threads, and is a really difficult problem to solve formally because it has to go beyond algorithmic complexity and care about the constant factors as well.<p>The other *nix problem is &quot;files&quot;.  Files were a compromise between usability and precision but very few things are merely files.  Devices and sockets sure aren&#x27;t.  There&#x27;s a reason the &#x27;file&#x27; utility exists; nothing is really just a file.  Text files are actually text files + a context-free grammar (hopefully) and parser somewhere, or they&#x27;re human-readable text (but probably with markup, so again a parser somewhere).<p>Plenty of object models have come and gone; they haven&#x27;t simplified computers (much less distributed computers), so we&#x27;ll need some theory more powerful than anything we&#x27;ve had in the past to express relationships between computation, storage, networks, and identities.