> ...preventing devs/ops people to run tools like iotop, unless extra capabilities are added.
you run those on the host, not inside containers
you run those on the host, not inside containers
And even then you run top on the host and obviously it doesn't know anything about containers because they're not real.