Right. They're at exactly opposite ends of the spectrum, from what I understand: A container uses OS-level namespace techniques to allow different environments

Right. They're at exactly opposite ends of the spectrum, from what I understand: A container uses OS-level namespace techniques to allow different environments to run on the same kernel, whereas a hypervisor runs underneath the kernel to multiplex hardware such that multiple entirely unrelated OSes can run on the same computer at the same time.