Show HN: Subgraph OS, the secure os

Trying to achieve Qubes OS concepts with containers is a very hard task. Wondering how this can be achieved. Do they provide any paper or detailed view of the implementation?<p>Some questions:<p><pre><code> - Do they provide their own implementation of containers or rely on some already existing (docker, rkt, etc)? - How containers communicate? what protocol? - How filesystem is handled? Containers have volumes for file system sharing? - What&#x27;s the plan for devices management? How my USB pendrive, speaker or webcam is available inside a container?</code></pre>

Nice diagram, very pretty.<p>It&#x27;s a bit less ambitious than it sounds, though, as it&#x27;s not really a different operating system (such as sel4) but a Linux distribution with armouring, secure defaults, Tor, and some useful userland software. Running the PDF viewer in secure isolation is a nice touch.<p>It says that higher-level languages are preferred for the userland software but doesn&#x27;t say which language?