ahandle

Your binary requires other bits to run; shared libraries, config files, directories, etc. Deploy these into a protected space (chrooted) in conjunction with the binary, and you have created an containerized application.

It's just like the concept of a Golden System Image, but with only a subset of the system, essentially only that which is required to run (and respond to the container manager).

Gaining access to the resources of the system (and sharing them responsibly) is the trick.

Cue Docker.

I can't wait for my demo :)

Is Illumos KVM still tracking Linux version 2.6.34?

Ben Rockwood (Cuddletech) is often informative and entertaining. Can't wait for the content to shift away from Solaris' corpse.