@lanodan @phnt docker is just glorified chroot jails with 10 layers of syscall filter duct tape that just complicates things and absolutely wrecks i/o performance due to overhead that is several orders of magnitude worse than with a kvm guest (nobody talks about that of course)