Container

A container is a process that shares the host kernel and is separated from other workloads by namespaces and cgroups.

A container is a process that shares the host kernel and is separated from other workloads by namespaces and cgroups. Namespaces limit what the process can see, and cgroups limit how much the process can use. Containers are OS-level virtualization, one of the two main ways to divide one host into many isolated units. The other way is hardware virtualization, which runs each workload in a virtual machine with its own guest kernel.