Function container_of 

pub fn container_of(pid: u32) -> Option<String>

Container identity for a live PID by reading /proc/<pid>/cgroup. Any IO error (PID gone, foreign user, no procfs) reads as “host / unknown” → None; this never fails.