> they accomplish the same goals as full VMs Not if you're doing things that require certain kernel features. For example, if I have an application that uses i

> they accomplish the same goals as full VMs Not if you're doing things that require certain kernel features. For example, if I have an application that uses io_uring, it's _very_ pertinent as to which kernel it runs on. A VM has that in scope, a Docker container does not.