I agree with the other commentor, this is an important distinction. It has no hypervisor and is really just a normal process using standard kernel features: cgr

I agree with the other commentor, this is an important distinction. It has no hypervisor and is really just a normal process using standard kernel features: cgroups (resource limiting) and namespaces (resource isolation). It's really not so different to chroot.