[als0]

> I'm not sure why you'd run Docker inside KVM or a user-mode Linux kernel. Wouldn't you rather just run Docker directly inside the host kernel?

For better isolation. Privilege escalation would only affect the user mode kernel.