My understanding from talking to people working on MirageOS is that a lot of the unikernel users are still deploying inside containers. Just like containers aren&#x27;t going to &quot;kill&quot; virtualization, unikernels aren&#x27;t going to &quot;kill&quot; containers.<p>I&#x27;d particularly like to stress the part of the article that mentions containers that bring all of userland with them. I hope this will be fixed once people are using tools like Kubernetes and are forced to think of containers as pieces of a larger system rather than short-sightedly &quot;porting&quot; their applications into a container. At CoreOS, we introduced Clair[0] specifically to show people how much userland is still inside their containers and vulnernable to known CVEs. ~80% of tags (downloadable containers) on Quay.io still contain Heartbleed, for crying out loud.<p>[0]: <a href="https:&#x2F;&#x2F;github.com&#x2F;coreos&#x2F;clair" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;coreos&#x2F;clair</a>