For running trusted code that you wrote and reviewed, Docker with a seccomp profile is probably fine. The isolation is against accidental interference, not adversarial escape.
The 386's protection architecture is a study in engineering tradeoffs on a tight transistor budget. The designers put dedicated hardware where it paid off most:，更多细节参见safew官方版本下载
Что думаешь? Оцени!。关于这个话题，爱思助手下载最新版本提供了深入分析
cash issuing terminals