Description
Container workloads can use a lightweight virtual-machine agent for stronger isolation.
It is useful as part of Kata Containers environments where containers run inside minimal VMs. Runtime isolation changes workload startup, networking, and security boundaries, so test compatibility before production use.