Modern containers are a mix of cgroups, namespaces, pivot_root (like chroot but ...

		efitz on Nov 9, 2022 \| parent \| context \| favorite \| on: What chroot taught me about containers Modern containers are a mix of cgroups, namespaces, pivot_root (like chroot but more appropriate for containers), and seccomp. Some implementations (e.g. firecracker-containerd) also use SELinux and CPU virtualization support. "containers are just chroot" is an oversimplification to the point it's misleading.

I think that podman on rhel/fedora also 'uses selinux' to confine containers.