Given a Content-Addressed File System (or fs-like thing, like git, bittorrent, etc), a small hypervisor with such a system could boot entire VMs from a single hash, ensuring the integrity of all the software in the VM.
If the CAFS includes granular, merke-tree hashing across all the files, VM images can be deduplicated. Installing software has the same semantics as a git-commit. (this is, in a sense, something docker can do too.)
(This is part of IPFS).
Given a Content-Addressed File System (or fs-like thing, like git, bittorrent, etc), a small hypervisor with such a system could boot entire VMs from a single hash, ensuring the integrity of all the software in the VM.
If the CAFS includes granular, merke-tree hashing across all the files, VM images can be deduplicated. Installing software has the same semantics as a git-commit. (this is, in a sense, something docker can do too.)