What a Linux container really is (it's not a VM)

The Linux kernel has no object called a "container." What you're really running is a normal process with two settings flipped — namespaces and cgroups. Here's the whole trick.