In my research, I deployed a number of containers which used a kernel module (named Ipfw3, actually a firewall) loaded on the host machine. This led to a confliction when those containers update their rules on Ipfw3 at the same time. Is there any way to make the Ipfw3 independent on each container? I mean those containers still share the linux kernel together except the kernel module called ‘Ipfw3’, thus having their own kernel module working separately in each container? Thanks in advance for your help.