I've read quite a lot about how docker works using cgroups and namespaces. If that's correct the *host* should be able to see all the processes and filesystem tree that is used by the docker container. However I seem to be unable to figure it out.

Could someone show it with docker v1.12.6 and a running "nginx" container?

Optional: Is it possible to still access the files of already exited containers the same way?

PS, GraphDriver looks like this:

```
"GraphDriver" : {
  "Name" : "aufs",
  "Data" : null
},

```