...The strong-isolation ability and rich container are its representitive features. PouchContainer is compatible with OCI image spec. Applications can minimize their storage usage with layered image structure. Incremental image distribution, saves datacenter bandwidth consumption. Significantly less runtime overhead than VM-based technologies. PouchContainer provides strong runtime isolation between applications, with cutting-edge technology both within kernel support and beyond kernel mode. PouchContainer supports standardized application image spec, so application sharing and reusing becomes trivial for developers and operators.