Eventually this will work with docker as well when distros enable user namespaces. but that doesnt change that you share the same kernel, which isnt going to b

Eventually this will work with docker as well when distros enable user namespaces. but that doesnt change that you share the same kernel, which isnt going to be as good as running a kernel per container security wise.