TIL: docker containers don't show up in `ip netns`

a couple weeks ago I ran ip netns with a couple containers running and didn’t see anything in the output. this surprised me because docker is using net namespaces for network isolation. it turns out that docker creates the netns at /var/run/docker/netns, while the ip command is looking in /run/netns.