I've even seen namespaces used for hiding malicious software in Ubuntu systems too.

It is possible, yes, but I would prefer to have full linux-free support for production use. There is on-going work for FreeBSD Cuda, though[0]. Just have to wait and see.

[0] https://www.freebsd.org/status/report-2024-04-2024-06/#_part...

Most of our server infrastructure runs on illumos at $work. SmartOS/Triton handles our "cloud" and OmniOS runs our storage. The linux monoculture problem luckily can still be handled with zones and bhyve, and I do trust illumos developers' competence to deliver good quality secure software a lot more than linux developers' as well.

Now if FreeBSD (or indeed illumos) would get CUDA-support we could stop using linux for GPU nodes too.

So the capability-based security framework is not missing unlike your original statement?

> I'm pretty sure, that the BSD family is pretty mature and secure.

Not to mention illumos-based systems too.