The Android kernel's restrictions on system calls (such as ptrace and clone) and SELinux policies make it difficult to achieve a full Linux container experience on non-rooted devices.