[0x1ceb00da]

So it's a lightweight way of running docker images inside a virtual machine?

[sys_call]

Yes, precisely. This also provides container operators with the benefits of a hypervisor, like memory ballooning, and dynamically allocating CPU and memory to workloads, improving resource utilization and the current node overprovisioning patterns.