Thanks for the good article. You may also want to look at the new Sysbox runtime (https://github.com/nestybox/sysbox), as it allows deployment of K8s inside Docker containers without resorting to customized images or unsecure privileged containers.