In practice, containers do have a shell, since a few things (Dockerfile RUN & CMD in non-exec mode, environment variable substitution, docker exec shell) dont work without it.