Show HN: Kern – container and resource runtime in a 1.5 MB binary, no daemon

A fast, rootless sandbox and virtual resource runtime for any workload, including untrusted and AI-generated code. Daemonless: a real, kernel-enforced container in ~3.5 ms from an OCI image, no daemon, one 1.52 MB static binary. - getkern/kern