[Senji]

Should probably just tiger-tree-hash your containers. If they deviate you give them a copy of your database, but it's a "virtual" shadow copy. No writes to it reflect on the real database.

[toomuchtodo]

If attackers get your database, you lose. Containers don't fix application vulnerability mitigation and leaking data.