What we actually mean is single role, not a single process. E.g. you might have a server that has several worker processes (e.g. Unicorn) and we'd run that in a single container. In other words, our container's init process will never have more than one direct child.

But no, there's definitely not agreement yet on what's the best approach. We hope to blog more about this in the future.