the host ▶ But uses the same kernel (it’s not virtualization!) ▶ Linux host & Linux container ▶ Execution drivers: ▶ LXC ▶ libcontainer ▶ Isolation method: cgroups ▶ Namespace isolation (PID, mount, net, ipc) ▶ Resource limiting (memory, swap) ▶ Prioritization (CPU, I/O) ▶ $ docker run ubuntu echo 'Hello world!'