TIL: docker containers don't show up in `ip netns`
a couple weeks ago I ran ip netns with a couple containers running and didn’t see anything in the
output. this surprised me because docker is using net namespaces for network isolation. it turns out
that docker creates the netns at /var/run/docker/netns, while the ip command is looking in
/run/netns.