&gt; <i>You&#x27;re assuming here that there aren&#x27;t and never will be exploits that break out of the hypervisor. This is not the world we live in.</i><p>Really? Here&#x27;s what I wrote in this very thread, just above your message: <i>If for your use case hypervisors are not secure enough, 1 hypervisor per physical machine is too much overhead, and the tooling for bare metal targets is not adequate, then unikernels are not a good solution for your use case.</i> [1]<p>At this point I believe we are talking past each other, you are not addressing (and apparently not reading) any of my points, so let&#x27;s agree to disagree.<p>[1] <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=10956899" rel="nofollow">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=10956899</a>