Linux apps are run in an unprivileged container, inside a VM that uses a stripped down kernel. By default all apps run in the same container in the same VM, but

Linux apps are run in an unprivileged container, inside a VM that uses a stripped down kernel. By default all apps run in the same container in the same VM, but that can be controlled by the user (through the command-line, there's no GUI for that yet). This is detailed here: https://chromium.googlesource.com/chromiumos/docs/+/master/containers_and_vms.md https://chromium.googlesource.com/chromiumos/docs/+/master/c... Android apps are run directly in a container (and each Android app runs in a sort of container, whether on smartphones or on chromebooks). See https://chromium.googlesource.com/chromiumos/platform2/+/master/arc/container-bundle/README.md https://chromium.googlesource.com/chromiumos/platform2/+/mas...