Isolated From What, Exactly: Containers, Images, and Their Boundaries
Deleting a file in a later image layer does not remove it. The removal is recorded as an entry; the bytes are still in the layer below.
-
-
Container
Isolation is not a property a container has. It is a list of specific things you asked the kernel to hide, one flag at a time.