You restart a container with one extra flag—--pid=host—and suddenly top inside it shows every process on the host. Nothing else changed. That's the moment the "container as isolated VM" mental model breaks down, and the real one has to replace it.

Containers aren't virtual machines. They don't have a separate kernel. They're Linux processes whose...