Doesn't the container help with versioning the software inside it, but you're still tied to the host computer's operating system, and so when you upgrade that you have to test every single container to see if anything broke?

Whereas if running a VM you have a lot more OS upgrades to do, but you can do them individually and they have no other impact?

This is the bit I've never understood with containers...