Yes all container technologies are at play, including namespaces, cgroups (for resource quotas), seccomp, Linux Security Modules, and probably some odds and end

Yes all container technologies are at play, including namespaces, cgroups (for resource quotas), seccomp, Linux Security Modules, and probably some odds and ends I am forgetting. Of course e.g. FreeBSD is a different bag.