Most of this is mitigated by running docker in an LXC containers (like proxmox does) which grants a lot more isolation than docker on it's own - closer in nature to running separate VMs.
Too bad it straight doesn't work without heavy mods in pve9
Too bad it straight doesn't work without heavy mods in pve9