[alfiedotwtf]

This is why I would still rather isolate using QEMU, docker, or Virtually Box rather than a very think chroot-like environment

[foresto]

Docker uses namespaces by default. Are you using an add-on that makes it use a hypervisor instead?