If you enable --privileged just to get CAP_SYS_ADMIN for nested process isolation, you have added one layer (nested process visibility) while removing several others (seccomp, all capability restrictions, device isolation). The net effect is arguably weaker isolation than a standard unprivileged container. This is a real trade-off that shows up in production. The ideal solutions are either to grant only the specific capability needed instead of all of them, or to use a different isolation approach entirely that does not require host-level privileges.
AI 加持：全新推出 AI 搜索与 Copilot Agent 模式
。服务器推荐对此有专业解读
因此仅仅短短三年后，2020 年 11 月，完美日记母公司逸仙电商正式登陆纽交所，成为美股国货美妆第一股，上市初期市值一路冲高，完美日记被赋予“中国欧莱雅” 的极高期待。
而三星和 Google 这次在 Galaxy S26 系列上做的 Gemini 智能体，可以说两者兼备。根据三星方面透露的信息，其应用商城排名前 200 的应用都能支持（但仅限特定应用的使用效果可以保证，后面详述）——说明三星、Google 至少大体上这些应用开发者打好了招呼。