Aren't you talking about cgroups? They "allow processes to be organized into hierarchical groups whose usage of various types of resources can then be limited

Aren't you talking about cgroups? They "allow processes to be organized into hierarchical groups whose usage of various types of resources can then be limited and monitored." `man cgroups` and `man unshare`.