We have observed the daemon getting into a bad state and stopping responding to container create requests, wedging our production system. I guess this kind of b

We have observed the daemon getting into a bad state and stopping responding to container create requests, wedging our production system. I guess this kind of bug could happen with a non-daemon approach if there's shared state, but it seems less likely. Not using any components with root privileges obviously makes things more secure. Another benefit of not requiring a daemon or privileges is that then it should be easy to manage fully independent sets of containers. In particular a container should be able to manage its own nested containers in a straightforward way. This is painful in Docker.