Namespace and Control groups. Linux has a module called Control group , which make sure the container process gets what it needs and make sure it does not consume more that it intended. Linux has sudo namespace /proc and /sys where you can check the namespace and c-group parameter linux applies for a container process.