Could you cheat by mounting the node's docker socket in a privileged pod and execute `docker run` from that pod? But yeah, when I said "one service per contain

Could you cheat by mounting the node's docker socket in a privileged pod and execute `docker run` from that pod? But yeah, when I said "one service per container" I was thinking about the step before deploying to K8s. It's because I've seen a few years ago some python projects completely encapsulated in a Docker container, with an init system like supervisord (running a redis, a django app, and celery workers).