See that&#x27;s the model I&#x27;d expect to take - but that model makes perfect sense in the unikernel world too. So the author must be claiming that you need the debugging tools <i>inside</i> the container, otherwise the point about not having tcpdump etc. available makes no sense.