Why do you think I'm angry? I'm just pointing out that you are saying things that don't carry semantic content without prevaricating about it. Apologies if that

Why do you think I'm angry? I'm just pointing out that you are saying things that don't carry semantic content without prevaricating about it. Apologies if that comes off as hostile - I don't really have time to write this in a gentler way. > CPUs do not have hardware containerization support. they DO have hardware virtualization support. I already explained why this is wrong with specific examples. > containers know they are containers, necessarily User-mode processes need not know they are containerized, and this has nothing to do with security. > virtual machines do not know they are virtual machines unless... This is in practice not true, even with fully simulated hardware. Look up "VM detection". > the CPU, at a hardware level, knows about each virtual machine, where its memory is, and what each virtual machine is doing That is not how virtualization works at all. Once again, not trying to be hostile, just don't have time to say this gently. This is the kind of thing people say when they haven't actually written code against virtualization extensions. The CPU does not "know" anything about what VMs are running - that is not an abstraction that is reified at the hardware level. > and they all share the same OS kernel With access to kernel resources gated via a specific set of APIs - same as with a VM. Again, the question is just which set of APIs you trust. > they are separated all the way down to the CPU and RAM. Another meaningless cliche that suffices for a basic mental model of VMs, but insufficient for security reasoning > the managing virtual machine cannot see inside its sibling virtual machines normally, and would require escalation Precisely the same statement applies for containers. > I don't know how to be more clear. There is no need - it is already perfectly clear that you are simply using an insufficiently precise approximative model of how VMs work.