Docker Privileges Nested virtualization Kernel customization is possible workload identity Vector: metrics and logs collection, custom metrics possible