It's basically just a chroot but with additional levels of isolation that make a process think it's running in its own copy of an OS in addition to running on i

It's basically just a chroot but with additional levels of isolation that make a process think it's running in its own copy of an OS in addition to running on its own filesystem (as with a simple chroot). So it's similar to the concept of a virtual machine but it "virtualizes" the OS kernel instead of the hardware. See here: https://en.wikipedia.org/wiki/LXC https://en.wikipedia.org/wiki/LXC