I don't understand this point:<p><pre><code> - Fully userspace containers, no need for elevated privileges
</code></pre>
The most basic Linux container is constructed with chroot and namespaces, both of which require root privileges (or at least CAP_SYS_CHROOT and CAP_SYS_ADMIN respectively). Additionally managing layers with a union filesystem, unless utilising FUSE, will also require elevated privileges.