Containers on virtual machines