Licson Lee
says to
電訊台
冇 set 好嘅話 docker 淨係得 kernel isolation