Container images (like in Docker) contain an OS?  That&#x27;s news to me.  I thought they avoided having an OS, and instead just have binaries that are run in a very isolated environment.<p>It sounds like unikernels are still based around hardware virtualization.  That seems like a mistake to me. If your image includes the code to switch an x86 processor from real mode into protected mode, you&#x27;re doing it wrong (IMO).