@theorytoe @bonifartius
Containers use the kernel of the host system and create an illusionary environment..
chroot
- changes the current root directory
unshare - creates namespaces for:
- User
- Process ID (PID)
- Network
- Mount
- Interprocess Communication (IPC)
..in which the process is allowed to run wild without being able to break anything on the host. there is no kernel abstraction.