@GNUxeava both are wrong (docker is more wrong tho)

> that run isolated from the host system

they're _literally_ part of the host system. might as well call a secondary user account a "container" at that point

real definition is "a bunch of namespaces all applied at once" anything else (runtime, init system, etc) is optional