Licson Lee says to YSITD
container 是主要做隔離和資源限制