@wolf480pl @quad Except it does use it, but it sticks to a small subset of it and without hooks to rest of the system to avoid the problems that docker is rather infamous for allowing.
Like CVE-2016-3135 is related to allowing to mess with iptables.