see https://www.usenix.org/legacy/events/atc10/tech/full_papers/Potter.pdf https://www.usenix.org/legacy/events/atc10/tech/full_papers/..., https://www.usenix.o

see https://www.usenix.org/legacy/events/atc10/tech/full_papers/Potter.pdf https://www.usenix.org/legacy/events/atc10/tech/full_papers/..., https://www.usenix.org/legacy/event/lisa11/tech/full_papers/Potter.pdf https://www.usenix.org/legacy/event/lisa11/tech/full_papers/..., and https://patents.google.com/patent/US8589947 https://patents.google.com/patent/US8589947 I'd argue that docker copied this in a degenerate way, but that those papers implemented what you asked for.