Actually VMs allow different kernels running over the VM later. A container does not, but isolates at the kernel boundary (so they’re all running on the real kernel). That’s the weirdness of docker on ...