[tptacek]

That ship has already sailed, so much so that real companies are willing to execute hostile code inside Docker instances; Docker isn't even virtualized.

Given that virtualization is the de facto standard deployment technology for the majority of all new applications, it's worth knowing the specific limitations.