3 ms·

So basically a chroot jail running a process as an unprivileged user. Cool new tech!

• icebraining 9y ago
  Yes, plus a network namespace with its own IP and limits to memory/CPU/IO.