“The next thing along the lines of container breakout is, and this one's probably the absolute most important, is you have to use an unprivileged container.”

Transcript evidence from Jay Beale -- Docker Security and AppSec.