“Cells” proposes containers as kernel objects

What happened and what to do

In an article published on October 29, 2026, LWN describes Josef Bacik’s “cells” proposal to make containers first-class kernel objects. Today, the kernel provides components such as namespaces, control groups, and sandboxing mechanisms, but no native container abstraction; tools must combine those pieces. The article also notes that earlier attempts to add this support made little progress.

For a company, the proposal is a reason to review how its container environments are configured and secured with current kernel features. A practical implementation could map dependencies among namespaces, control groups, and sandboxing mechanisms, monitor relevant kernel changes, and establish procedures for evaluating new options before adopting them in production.

How the consultancy can help

Wendelmaques can assess container environment configurations and risks, define a scope for improvements, and implement monitoring and evaluation and operational procedures suited to the company’s infrastructure.

Next step

Send a brief description of your container environment and current challenges to receive a scoped proposal.