https://papers.freebsd.org/2000/phk-jails/
https://youtu.be/hgN8pCMLI2U?si=CH-Fpyj16bEWDZzc
2nd containers go farther and virtualize network, and other resources.