Indeed, standard container runtimes neither require VT-x (virtualization instructions) or VT-d (IOMMU for PCIe devices). They're "just" process isolation (cgrou

Indeed, standard container runtimes neither require VT-x (virtualization instructions) or VT-d (IOMMU for PCIe devices). They're "just" process isolation (cgroups), network stack isolation (netns), and filesystem isolation (overlayfs). Workloads on Kubernetes are not using virtual hardware unless you choose a managed provider or container runtime that states they are.