A mobile computing apparatus comprising a processor and a wireless communications interface coupled to the processor, wherein the processor is configured to: execute an init process, wherein the init process comprises a container manager; create, using the container manager, a plurality of secure containers for providing isolated execution environments, wherein the plurality of containers comprises: a first secure container for executing a first mobile device process configured for work use to access a corporate or business network; a second secure container for executing a cluster node process, wherein the cluster node process is configured to operate as a node of a cloud service infrastructure; and a third secure container for executing a second mobile device process configured for home use to perform higher risk activities; wherein the init process starts the execution of one of the first and second mobile devices processes, and provides the started mobile device process priority access to all resources of the mobile computing apparatus, wherein executing the cluster node process configures the processor to: receive a task request from a cloud service via the wireless communications interface; send the task request to the init process to run the task; receive the task result from the init process; and transmit the task result to the cloud service via the wireless communication interface; and wherein the init process running the task, configures the processor to: create a secure task container based on information contained in the task request; load the task environment into the secure task container; control (508, 510) execution of the task using the resources of the mobile computing apparatus at a lower priority; send the task result to the cluster node process once the task is completed; and destroy the secure task container. execute an init process, wherein the init process comprises a container manager; create, using the container manager, a plurality of secure containers for providing isolated execution environments, wherein the plurality of containers comprises: a first secure container for executing a first mobile device process configured for work use to access a corporate or business network; a second secure container for executing a cluster node process, wherein the cluster node process is configured to operate as a node of a cloud service infrastructure; and a third secure container for executing a second mobile device process configured for home use to perform higher risk activities; a first secure container for executing a first mobile device process configured for work use to access a corporate or business network; a second secure container for executing a cluster node process, wherein the cluster node process is configured to operate as a node of a cloud service infrastructure; and a third secure container for executing a second mobile device process configured for home use to perform higher risk activities; wherein the init process starts the execution of one of the first and second mobile devices processes, and provides the started mobile device process priority access to all resources of the mobile computing apparatus, wherein executing the cluster node process configures the processor to: receive a task request from a cloud service via the wireless communications interface; send the task request to the init process to run the task; receive the task result from the init process; and transmit the task result to the cloud service via the wireless communication interface; and receive a task request from a cloud service via the wireless communications interface; send the task request to the init process to run the task; receive the task result from the init process; and transmit the task result to the cloud service via the wireless communication interface; and wherein the init process running the task, configures the processor to: create a secure task container based on information contained in the task request; load the task environment into the secure task container; control (508, 510) execution of the task using the resources of the mobile computing apparatus at a lower priority; send the task result to the cluster node process once the task is completed; and destroy the secure task container. create a secure task container based on information contained in the task request; load the task environment into the secure task container; control (508, 510) execution of the task using the resources of the mobile computing apparatus at a lower priority; send the task result to the cluster node process once the task is completed; and destroy the secure task container.