use `uname -r` to get container's kernel version