New top story on Hacker News: Fully static, unprivileged, self-contained, containers as executable binaries