[blueflow]

Containers do isolation in userspace, its a pure software thing. Its not doing any kind of hardware isolation nor is it able to.

[TheCondor]

Don’t they use cgroups? It’s software but the kernel helps.