For running trusted code that you wrote and reviewed, Docker with a seccomp profile is probably fine. The isolation is against accidental interference, not adversarial escape.
If you get shingles after being vaccinated, the symptoms can be much milder.
，这一点在safew官方版本下载中也有详细论述
controller.enqueue(chunk);
“The river won, the forest won, the memory of our ancestors won,” said the campaigners in Santarém when it was clear their actions had forced the Brazilian government into a U-turn on plans to privatise one of the world’s most beautiful waterways and expand its role as a soy canal.