Isolation
guest@6admin.io:~$ ls ~/tags/isolation
Docker vs jails, the honest comparison
The recurring FreeBSD-jails-versus-containers debate misses the point, because it pits a badly measured memory footprint against reality instead of talking about isolation, portability and ecosystem.
Containers, micro-VMs and Firecracker: why isolation is not what you think
Containers share the kernel. A container escape is a kernel escape. Firecracker micro-VMs bring hardware isolation at container speed. The chroot and the link are two different things.