[lsc]

that is... a healthy way to look at it.

My experience has been that using containers to go multi-tenant leads only to misery and pain.

But it does seem a reasonable-ish way to handle packaging, though I have less experience with that use case. It does seem like it would work, assuming you still have a way to update everything, and assuming everything is happy with the same kernel.