Yes and no. The problem is that the magic word &quot;container&quot; obscured what is actually being done (cgroups, namespaces, iptables, etc etc etc).<p>Its one more thing that result in confusion between user and computer about the state of the machine.