Method and system for improving software container performance and isolation

A system comprising:

• a processing platform comprising a plurality of processing devices, each comprising a processor coupled to a memory;
• the processing platform being configured:
• to implement a kernel-based isolation layer;
• to configure a software container on the kernel-based isolation layer to include a dedicated operating system kernel as a library operating system;
• and
• to execute one or more user processes in the software container,
• wherein the library operating system runs in the software container at a privilege level that is the same as a privilege level of the one or more user processes executing in the software container.

A computer program product comprising a non-transitory processor-readable storage medium having stored therein program code of one or more software programs, wherein the program code when executed by a processing platform comprising a plurality of processing devices, each processing device comprising a processor coupled to a memory, causes the processing platform:

• to implement a kernel-based isolation layer;
• to configure a software container on the kernel-based isolation layer to include a dedicated operating system kernel as a library operating system;
• and
• to execute one or more user processes in the software container,
• wherein the library operating system runs in the software container at a privilege level that is the same as a privilege level of the one or more user processes executing in the software container.