4 ms·The cpu / memory / network "isolation" is done with cgroups and can be done without containersby geggam 11y agoThe cpu / memory / network "isolation" is done with cgroups and can be done without containersvidarh 11y agocgroups are Linux-specific - they're not relevant for a OS X/NetBSD tool.geggam 11y agono kidding ? sarcasm They also don't isolate anything. especially when the container system is running as root. Neither does chroot.