Linux namespaces are used to provide isolation between containers

of global system resources, such as users, processes, filesystems, and

networking. Linux Control Groups (also known as cgroups) are used to limit

the amount of CPU and memory that a container is allowed to consume.