I still don&#x27;t get it.<p>Yep, unikernels can get away without the security boundary between user and kernel modes... except if you want any security at all in your installation, because at kernel mode people can break out of the container.<p>They can also get away without process scheduling and IPC, but if you want any multiprocessing on the application, you&#x27;ll need to bring it either on the kernel or the userland. Ditto for user management.<p>They can&#x27;t really get away without device drivers. Ok, except for devices that you won&#x27;t use, just like any other kernel.<p>What is that kernel feature that people take away? Or are they just talking about a stripped down Linux without the device drivers (that fit a floppy disk)?<p>The same applies to the services. What are those services that people gain so much from removing from containers, and why don&#x27;t people remove them from VMs and real machines too?