2 ms·

Or LXD/LXC which can run containers such that they are isolated from one another in terms of their id mappings.