But see, those are kernel features, not Docker features. We use them in different ways from Docker. You wouldn't say that two apps should obviously share code j

But see, those are kernel features, not Docker features. We use them in different ways from Docker. You wouldn't say that two apps should obviously share code just because they both open files. But using a file is honestly at least as complicated as setting up a namespaces. Also, about 1% of Sandstorm's code is actually dealing with those things, while the other 99% deals with implementing all the high-level features in my bullet list, none of which Docker does at all.