Oh! I didn't know Docker used pivot_root, and I was always curious why that call and chroot() both existed. This makes some sense.