> Yup that's trivially easy if you have permissions to use mknod and mount.

Docker containers don't have mount permissions by default.