[shaded-enmity]

In Docker each container process is a child of the Docker daemon process. If you need to apply security patches to the Docker daemon it kills all your running containers.

[raesene9]

Technically the parent process for a contained process with Docker is containerd-shim.

Also, Docker does support live restore if you want to keep containers running over daemon restarts https://docs.docker.com/config/containers/live-restore/