Details matter at Amazon scale as they say. I have used Docker ever since it was beta, it never made it to our production systems though. LXD looks pretty promising, unprivileged containers, no container service and so on. When I have more time I will investigate how to roll it on CentOS.