Almost: Containers go beyond the Unix philosophy in the sense that they (in theory) can run completely untrusted code, which isn't really advisable in a Unix sy

Almost: Containers go beyond the Unix philosophy in the sense that they (in theory) can run completely untrusted code, which isn't really advisable in a Unix system (although the system provides some means for it). Concerning composability and interoperability I'm with you, and I think it's a shame that Docker decided to build their own stack instead of improving LXC.