The container shares the actual kernel, but has independent namespaces (including mounted filesystems). In general, the precise kernel version doesn't matter t

The container shares the actual kernel, but has independent namespaces (including mounted filesystems). In general, the precise kernel version doesn't matter to applications: libc will hide a wide range of stuff for you, and you bring your own libc in the container image (assuming you need it. This is not true for eg. Golang).