SherbyNet - /page/wikibook/entry.mu

Micron Document

<!DOCTYPE html>

<title>OS-level virtualization</title>

</head>

OS-level virtualization

</h1>

</header>

/* start https://en.wikipedia.org/ */

.mw-parser-output .ambox{border:1px solid #a2a9b1;border-left:10px solid #36c;background-color:#fbfbfb;box-sizing:border-box}.mw-parser-output .ambox+link+.ambox,.mw-parser-output .ambox+link+style+.ambox,.mw-parser-output .ambox+link+link+.ambox,.mw-parser-output .ambox+.mw-empty-elt+link+.ambox,.mw-parser-output .ambox+.mw-empty-elt+link+style+.ambox,.mw-parser-output .ambox+.mw-empty-elt+link+link+.ambox{margin-top:-1px}html body.mediawiki .mw-parser-output .ambox.mbox-small-left{margin:4px 1em 4px 0;overflow:hidden;width:238px;border-collapse:collapse;font-size:88%;line-height:1.25em}.mw-parser-output .ambox-speedy{border-left:10px solid #b32424;background-color:#fee7e6}.mw-parser-output .ambox-delete{border-left:10px solid #b32424}.mw-parser-output .ambox-content{border-left:10px solid #f28500}.mw-parser-output .ambox-style{border-left:10px solid #fc3}.mw-parser-output .ambox-move{border-left:10px solid #9932cc}.mw-parser-output .ambox-protection{border-left:10px solid #a2a9b1}.mw-parser-output .ambox .mbox-text{border:none;padding:0.25em 0.5em;width:100%}.mw-parser-output .ambox .mbox-image{border:none;padding:2px 0 2px 0.5em;text-align:center}.mw-parser-output .ambox .mbox-imageright{border:none;padding:2px 0.5em 2px 0;text-align:center}.mw-parser-output .ambox .mbox-empty-cell{border:none;padding:0;width:1px}.mw-parser-output .ambox .mbox-image-div{width:52px}@media(min-width:720px){.mw-parser-output .ambox{margin:0 10%}}@media print{body.ns-0 .mw-parser-output .ambox{display:none!important}}

/* end https://en.wikipedia.org/ */

</style>

OS-level virtualization is an <a href="Operating_system" title="Operating system">operating system</a> (OS) <a href="Virtualization" title="Virtualization">virtualization</a> paradigm in which the <a href="Kernel_(operating_system)" title="Kernel (operating system)">kernel</a> allows the existence of multiple isolated <a href="User_space_and_kernel_space" title="User space and kernel space">user space</a> instances, including containers (<a href="LXC" title="LXC">LXC</a>, <a href="Solaris_Containers" title="Solaris Containers">Solaris Containers</a>, AIX <a href="Workload_Partitions" title="Workload Partitions">WPARs</a>, HP-UX SRP Containers, <a href="Docker_(software)" title="Docker (software)">Docker</a>, <a href="Podman" title="Podman">Podman</a>), zones (<a href="Solaris_Containers" title="Solaris Containers">Solaris Containers</a>), virtual private servers (<a href="OpenVZ" title="OpenVZ">OpenVZ</a>), partitions, virtual environments (VEs), virtual kernels (<a href="Vkernel" title="Vkernel">DragonFly BSD</a>), and jails (<a href="FreeBSD_jail" title="FreeBSD jail">FreeBSD jail</a> and <a href="Chroot" title="Chroot">chroot</a>).<a href="#cite_note-1">[1]</a> Such instances may look like real computers from the point of view of programs running in them. A <a href="Computer_program" title="Computer program">computer program</a> running on an ordinary operating system can see all resources (connected devices, files and folders, <a href="Shared_resource" title="Shared resource">network shares</a>, CPU power, quantifiable hardware capabilities) of that computer. Programs running inside a <a href="Containerization_(computing)" title="Containerization (computing)">container</a> can only see the container's contents and devices assigned to the container.

On <a href="Unix-like" title="Unix-like">Unix-like</a> operating systems, this feature can be seen as an advanced implementation of the standard <a href="Chroot" title="Chroot">chroot</a> mechanism, which changes the apparent root folder for the current running process and its children. In addition to isolation mechanisms, the kernel often provides <a href="Resource_management_(computing)" title="Resource management (computing)">resource-management</a> features to limit the impact of one container's activities on other containers. Linux containers are all based on the virtualization, isolation, and resource management mechanisms provided by the <a href="Linux_kernel" title="Linux kernel">Linux kernel</a>, notably <a href="Linux_namespaces" title="Linux namespaces">Linux namespaces</a> and <a href="Cgroups" title="Cgroups">cgroups</a>.<a href="#cite_note-2">[2]</a>

Although the word container most commonly refers to OS-level virtualization, it is sometimes used to refer to fuller <a href="Virtual_machine" title="Virtual machine">virtual machines</a> operating in varying degrees of concert with the host OS, such as <a href="Microsoft" title="Microsoft">Microsoft</a>'s <a href="Hyper-V" title="Hyper-V">Hyper-V</a> containers. For an overview of <a href="Virtualization" title="Virtualization">virtualization</a> since 1960, see <a href="Timeline_of_virtualization_technologies" title="Timeline of virtualization technologies">Timeline of virtualization technologies</a>.

<div class="mw-heading mw-heading2"><h2 id="Operation">Operation</h2></div>

On ordinary operating systems for personal computers, a computer program can see (even though it might not be able to access) all the system's resources. They include:

<ul><li>Hardware capabilities that can be employed, such as the <a href="Central_processing_unit" title="Central processing unit">CPU</a> and the network connection</li>

<li>Data that can be read or written, such as files, folders and <a href="Shared_resource" title="Shared resource">network shares</a></li>

<li>Connected <a href="Peripheral" title="Peripheral">peripherals</a> it can interact with, such as <a href="Webcam" title="Webcam">webcam</a>, <a href="Printer_(computing)" title="Printer (computing)">printer</a>, scanner, or fax</li></ul>

The operating system may be able to allow or deny access to such resources based on which program requests them and the <a href="User_(computing)" title="User (computing)">user account</a> in the context in which it runs. The operating system may also hide those resources, so that when the computer program enumerates them, they do not appear in the enumeration results. Nevertheless, from a programming point of view, the computer program has interacted with those resources and the operating system has managed an act of interaction.

With operating-system-virtualization, or containerization, it is possible to run programs within containers, to which only parts of these resources are allocated. A program expecting to see the whole computer, once run inside a container, can only see the allocated resources and believes them to be all that is available. Several containers can be created on each operating system, to each of which a subset of the computer's resources is allocated. Each container may contain any number of computer programs. These programs may run concurrently or separately, and may even interact with one another.

Containerization has similarities to <a href="Application_virtualization" title="Application virtualization">application virtualization</a>: In the latter, only one computer program is placed in an isolated container and the isolation applies to file system only.

Operating-system-level virtualization is commonly used in <a href="Virtual_machine" title="Virtual machine">virtual hosting</a> environments, where it is useful for securely allocating finite hardware resources among a large number of mutually-distrusting users. System administrators may also use it for consolidating server hardware by moving services on separate hosts into containers on the one server.

Other typical scenarios include separating several programs to separate containers for improved security, hardware independence, and added resource management features.<a href="#cite_note-3">[3]</a> The improved security provided by the use of a chroot mechanism, however, is not perfect.<a href="#cite_note-4">[4]</a> Operating-system-level virtualization implementations capable of <a href="Live_migration" title="Live migration">live migration</a> can also be used for dynamic <a href="Load_balancing_(computing)" title="Load balancing (computing)">load balancing</a> of containers between nodes in a cluster.

<div class="mw-heading mw-heading3"><h3 id="Overhead">Overhead</h3></div>

Operating-system-level virtualization usually imposes less overhead than <a href="Full_virtualization" class="mw-redirect" title="Full virtualization">full virtualization</a> because programs in OS-level virtual partitions use the operating system's normal <a href="System_call" title="System call">system call</a> interface and do not need to be subjected to <a href="Emulator" title="Emulator">emulation</a> or be run in an intermediate <a href="Virtual_machine" title="Virtual machine">virtual machine</a>, as is the case with full virtualization (such as <a href="VMware_ESXi" title="VMware ESXi">VMware ESXi</a>, <a href="QEMU" title="QEMU">QEMU</a>, or <a href="Hyper-V" title="Hyper-V">Hyper-V</a>) and <a href="Paravirtualization" class="mw-redirect" title="Paravirtualization">paravirtualization</a> (such as <a href="Xen" title="Xen">Xen</a> or <a href="User-mode_Linux" title="User-mode Linux">User-mode Linux</a>). This form of virtualization also does not require hardware support for efficient performance.

<div class="mw-heading mw-heading3"><h3 id="Flexibility">Flexibility</h3></div>

Operating-system-level virtualization is not as flexible as other virtualization approaches since it cannot host a guest operating system different from the host one, or a different guest kernel. For example, with <a href="Linux" title="Linux">Linux</a>, different distributions are fine, but other operating systems such as Windows cannot be hosted. Operating systems using variable input systematics are subject to limitations within the virtualized architecture. Adaptation methods including cloud-server relay analytics maintain the OS-level virtual environment within these applications.<a href="#cite_note-5">[5]</a>

<a href="Oracle_Solaris" title="Oracle Solaris">Solaris</a> partially overcomes the limitation described above with its <a href="Branded_zones" class="mw-redirect" title="Branded zones">branded zones</a> feature, which provides the ability to run an environment within a container that emulates an older <a href="Solaris_8" class="mw-redirect" title="Solaris 8">Solaris 8</a> or 9 version in a Solaris 10 host. Linux branded zones (referred to as "lx" branded zones) are also available on <a href="X86" title="X86">x86</a>-based Solaris systems, providing a complete Linux <a href="User_space_and_kernel_space" title="User space and kernel space">user space</a> and support for the execution of Linux applications; additionally, Solaris provides utilities needed to install <a href="Red_Hat_Enterprise_Linux" title="Red Hat Enterprise Linux">Red Hat Enterprise Linux</a> 3.x or <a href="CentOS" title="CentOS">CentOS</a> 3.x <a href="Linux_distribution" title="Linux distribution">Linux distributions</a> inside "lx" zones.<a href="#cite_note-6">[6]</a><a href="#cite_note-7">[7]</a> However, in 2010 Linux branded zones were removed from Solaris; in 2014 they were reintroduced in <a href="Illumos" title="Illumos">Illumos</a>, which is the <a href="Open_source" title="Open source">open source</a> Solaris fork, supporting 32-bit <a href="Linux_kernel" title="Linux kernel">Linux kernels</a>.<a href="#cite_note-8">[8]</a>

<div class="mw-heading mw-heading3"><h3 id="Storage">Storage</h3></div>

Some implementations provide file-level <a href="Copy-on-write" title="Copy-on-write">copy-on-write</a> (CoW) mechanisms. (Most commonly, a standard file system is shared between partitions, and those partitions that change the files automatically create their own copies.) This is easier to back up, more space-efficient and simpler to cache than the block-level copy-on-write schemes common on whole-system virtualizers. Whole-system virtualizers, however, can work with non-native file systems and create and roll back snapshots of the entire system state.

<div class="mw-heading mw-heading2"><h2 id="Implementations">Implementations</h2></div>

<th rowspan="2">Mechanism

</th>

<th rowspan="2">Operating system

</th>

<th rowspan="2">License

</th>

<th rowspan="2">Actively developed since or between

</th>

<th colspan="10">Features

</th></tr>

<tr>

<th>File system isolation

</th>

<th><a href="Copy-on-write" title="Copy-on-write">Copy on write</a>

</th>

<th><a href="Disk_quota" title="Disk quota">Disk quotas</a>

</th>

<th>I/O rate limiting

</th>

<th>Memory limits

</th>

<th>CPU quotas

</th>

<th>Network isolation

</th>

<th>Nested virtualization

</th>

<th>Partition checkpointing and live migration

</th>

<th>Root privilege isolation

</th></tr>

<tr>

<td><a href="Chroot" title="Chroot">chroot</a>

</td>

<td>Most <a href="UNIX-like" class="mw-redirect" title="UNIX-like">UNIX-like</a> operating systems

</td>

<td>Varies by operating system

</td>

<td>1982

</td>

<td style="background:#FFB; color:black;vertical-align:middle;text-align:center;" class="table-partial">Partial<a href="#cite_note-root-escape-10">[a]</a>

</td>

<td style="background:#FFC7C7;color:black;vertical-align:middle;text-align:center;" class="table-no">No

</td>

<td style="background:#FFC7C7;color:black;vertical-align:middle;text-align:center;" class="table-no">No

</td>

<td style="background:#FFC7C7;color:black;vertical-align:middle;text-align:center;" class="table-no">No

</td>

<td style="background:#FFC7C7;color:black;vertical-align:middle;text-align:center;" class="table-no">No

</td>

<td style="background:#FFC7C7;color:black;vertical-align:middle;text-align:center;" class="table-no">No

</td>

<td style="background:#FFC7C7;color:black;vertical-align:middle;text-align:center;" class="table-no">No

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background:#FFC7C7;color:black;vertical-align:middle;text-align:center;" class="table-no">No

</td>

<td style="background:#FFC7C7;color:black;vertical-align:middle;text-align:center;" class="table-no">No

</td></tr>

<tr>

<td><a href="Docker_(software)" title="Docker (software)">Docker</a>

</td>

<td><a href="Linux" title="Linux">Linux</a>,<a href="#cite_note-11">[10]</a> <a href="Microsoft_Windows" title="Microsoft Windows">Windows</a> x64<a href="#cite_note-12">[11]</a> <a href="MacOS" title="MacOS">macOS</a><a href="#cite_note-13">[12]</a>

</td>

<td style="background: #9EFF9E; color:black; vertical-align: middle; text-align: center;" class="active table-active"><a href="Apache_License" title="Apache License">Apache License 2.0</a>

</td>

<td>2013

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background:#FFB; color:black;vertical-align:middle;text-align:center;" class="table-partial">Partial<a href="#cite_note-docker-disk-quotas-15">[b]</a>

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes (since 1.10)

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background:#FFC7C7;color:black;vertical-align:middle;text-align:center;" class="table-no">Only in experimental mode with <a href="CRIU" title="CRIU">CRIU</a> <a rel="nofollow" class="external autonumber" href="https://criu.org/Docker">[1]</a>

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes (since 1.10)

</td></tr>

<tr>

<td><a href="Linux-VServer" title="Linux-VServer">Linux-VServer</a> (security context)

</td>

<td><a href="Linux" title="Linux">Linux</a>, <a href="Windows_Server_2016" title="Windows Server 2016">Windows Server 2016</a>

</td>

</td>

<td>2001

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background:#FFB; color:black;vertical-align:middle;text-align:center;" class="table-partial">Partial<a href="#cite_note-vserver-net-17">[d]</a>

</td>

<td style="background: var(--background-color-interactive, #EEE); color: var(--color-base, black); vertical-align: middle; white-space: nowrap; text-align: center;" class="table-Unknown">?

</td>

<td style="background:#FFC7C7;color:black;vertical-align:middle;text-align:center;" class="table-no">No

</td>

<td style="background:#FFB; color:black;vertical-align:middle;text-align:center;" class="table-partial">Partial<a href="#cite_note-linux-vserver-paper-19">[e]</a>

</td></tr>

<tr>

<td><a href="Lmctfy" title="Lmctfy">lmctfy</a>

</td>

<td><a href="Linux" title="Linux">Linux</a>

</td>

<td style="background: #9EFF9E; color:black; vertical-align: middle; text-align: center;" class="active table-active"><a href="Apache_License" title="Apache License">Apache License 2.0</a>

</td>

<td>2013–2015

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background:#FFB; color:black;vertical-align:middle;text-align:center;" class="table-partial">Partial<a href="#cite_note-vserver-net-17">[d]</a>

</td>

<td style="background: var(--background-color-interactive, #EEE); color: var(--color-base, black); vertical-align: middle; white-space: nowrap; text-align: center;" class="table-Unknown">?

</td>

<td style="background:#FFC7C7;color:black;vertical-align:middle;text-align:center;" class="table-no">No

</td>

<td style="background:#FFB; color:black;vertical-align:middle;text-align:center;" class="table-partial">Partial<a href="#cite_note-linux-vserver-paper-19">[e]</a>

</td></tr>

<tr>

</td>

<td><a href="Linux" title="Linux">Linux</a>

</td>

<td>2008

</td>

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background:#FFB; color:black;vertical-align:middle;text-align:center;" class="table-partial">Partial<a href="#cite_note-lxc-dq-21">[f]</a>

</td>

<td style="background:#FFB; color:black;vertical-align:middle;text-align:center;" class="table-partial">Partial<a href="#cite_note-lxc-iolimit-22">[g]</a>

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

</td></tr>

<tr>

<td><a href="Singularity_(software)" title="Singularity (software)">Singularity</a>

</td>

<td><a href="Linux" title="Linux">Linux</a>

</td>

<td style="background: #9EFF9E; color:black; vertical-align: middle; text-align: center;" class="active table-active"><a href="BSD_Licence" class="mw-redirect" title="BSD Licence">BSD Licence</a>

</td>

</td>

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background:#FFC7C7;color:black;vertical-align:middle;text-align:center;" class="table-no">No

</td>

<td style="background:#FFC7C7;color:black;vertical-align:middle;text-align:center;" class="table-no">No

</td>

<td style="background:#FFC7C7;color:black;vertical-align:middle;text-align:center;" class="table-no">No

</td>

<td style="background:#FFC7C7;color:black;vertical-align:middle;text-align:center;" class="table-no">No

</td>

<td style="background:#FFC7C7;color:black;vertical-align:middle;text-align:center;" class="table-no">No

</td>

<td style="background:#FFC7C7;color:black;vertical-align:middle;text-align:center;" class="table-no">No

</td>

</td></tr>

<tr>

<td><a href="OpenVZ" title="OpenVZ">OpenVZ</a>

</td>

<td><a href="Linux" title="Linux">Linux</a>

</td>

<td>2005

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

</td>

<td style="background:#FFB; color:black;vertical-align:middle;text-align:center;" class="table-partial">Partial<a href="#cite_note-docker-inside-openvz-31">[j]</a>

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

</td></tr>

<tr>

<td><a href="Virtuozzo" class="mw-redirect" title="Virtuozzo">Virtuozzo</a>

</td>

<td><a href="Linux" title="Linux">Linux</a>, <a href="Microsoft_Windows" title="Microsoft Windows">Windows</a>

</td>

<td style="background: #E7E7FF; color:black; vertical-align: middle; text-align: center;" class="table-proprietary"><a href="Trialware" class="mw-redirect" title="Trialware">Trialware</a>

</td>

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

</td>

<td style="background:#FFB; color:black;vertical-align:middle;text-align:center;" class="table-partial">Partial<a href="#cite_note-vz-docker-inside-ct-37">[m]</a>

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td></tr>

<tr>

<td><a href="Solaris_Containers" title="Solaris Containers">Solaris Containers</a> (Zones)

</td>

<td><a href="Illumos" title="Illumos">illumos</a> (<a href="OpenSolaris" title="OpenSolaris">OpenSolaris</a>), <a href="Solaris_(operating_system)" class="mw-redirect" title="Solaris (operating system)">Solaris</a>

</td>

<td style="background: #DFF; color:black; vertical-align: middle; text-align: center;" class="free table-free"><a href="CDDL" class="mw-redirect" title="CDDL">CDDL</a>, <a href="Proprietary_software" title="Proprietary software">Proprietary</a>

</td>

<td>2004

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes (ZFS)

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background:#FFB; color:black;vertical-align:middle;text-align:center;" class="table-partial">Partial<a href="#cite_note-solaris-iolimit-39">[n]</a>

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

</td>

<td style="background:#FFB; color:black;vertical-align:middle;text-align:center;" class="table-partial">Partial<a href="#cite_note-solaris-nested-43">[p]</a>

</td>

<td style="background:#FFB; color:black;vertical-align:middle;text-align:center;" class="table-partial">Partial<a href="#cite_note-kernelzone-44">[q]</a><a href="#cite_note-coldmig-45">[r]</a>

</td>

</td></tr>

<tr>

<td><a href="FreeBSD_jail" title="FreeBSD jail">FreeBSD jail</a>

</td>

<td><a href="FreeBSD" title="FreeBSD">FreeBSD</a>, <a href="DragonFly_BSD" title="DragonFly BSD">DragonFly BSD</a>

</td>

<td style="background: #9EFF9E; color:black; vertical-align: middle; text-align: center;" class="active table-active"><a href="BSD_License" class="mw-redirect" title="BSD License">BSD License</a>

</td>

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes (ZFS)

</td>

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background:#FFB; color:black;vertical-align:middle;text-align:center;" class="table-partial">Partial<a href="#cite_note-freebsdvps-52">[32]</a><a href="#cite_note-freebsdvpsannounce-53">[33]</a>

</td>

</td></tr>

<tr>

<td><a href="Vkernel" title="Vkernel">vkernel</a>

</td>

<td><a href="DragonFly_BSD" title="DragonFly BSD">DragonFly BSD</a>

</td>

<td style="background: #9EFF9E; color:black; vertical-align: middle; text-align: center;" class="active table-active"><a href="BSD_Licence" class="mw-redirect" title="BSD Licence">BSD Licence</a>

</td>

</td>

</td>

</td>

<td data-sort-value="" style="background: var(--background-color-interactive, #ececec); color: var(--color-base, inherit); vertical-align: middle; text-align: center;" class="table-na">—

</td>

<td style="background: var(--background-color-interactive, #EEE); color: var(--color-base, black); vertical-align: middle; white-space: nowrap; text-align: center;" class="table-Unknown">?

</td>

</td>

</td>

</td>

<td style="background: var(--background-color-interactive, #EEE); color: var(--color-base, black); vertical-align: middle; white-space: nowrap; text-align: center;" class="table-Unknown">?

</td>

<td style="background: var(--background-color-interactive, #EEE); color: var(--color-base, black); vertical-align: middle; white-space: nowrap; text-align: center;" class="table-Unknown">?

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td></tr>

<tr>

<td><a href="Sysjail" title="Sysjail">sysjail</a>

</td>

<td><a href="OpenBSD" title="OpenBSD">OpenBSD</a>, <a href="NetBSD" title="NetBSD">NetBSD</a>

</td>

<td style="background: #9EFF9E; color:black; vertical-align: middle; text-align: center;" class="active table-active"><a href="BSD_License" class="mw-redirect" title="BSD License">BSD License</a>

</td>

<td>2006–2009

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background:#FFC7C7;color:black;vertical-align:middle;text-align:center;" class="table-no">No

</td>

<td style="background:#FFC7C7;color:black;vertical-align:middle;text-align:center;" class="table-no">No

</td>

<td style="background:#FFC7C7;color:black;vertical-align:middle;text-align:center;" class="table-no">No

</td>

<td style="background:#FFC7C7;color:black;vertical-align:middle;text-align:center;" class="table-no">No

</td>

<td style="background:#FFC7C7;color:black;vertical-align:middle;text-align:center;" class="table-no">No

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background:#FFC7C7;color:black;vertical-align:middle;text-align:center;" class="table-no">No

</td>

<td style="background:#FFC7C7;color:black;vertical-align:middle;text-align:center;" class="table-no">No

</td>

<td style="background: var(--background-color-interactive, #EEE); color: var(--color-base, black); vertical-align: middle; white-space: nowrap; text-align: center;" class="table-Unknown">?

</td></tr>

<tr>

<td><a href="Workload_Partitions" title="Workload Partitions">WPARs</a>

</td>

</td>

<td style="background: #E7E7FF; color:black; vertical-align: middle; text-align: center;" class="table-proprietary"><a href="Commercial_software" title="Commercial software">Commercial</a> <a href="Proprietary_software" title="Proprietary software">proprietary software</a>

</td>

<td>2007

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background:#FFC7C7;color:black;vertical-align:middle;text-align:center;" class="table-no">No

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

</td>

<td style="background:#FFC7C7;color:black;vertical-align:middle;text-align:center;" class="table-no">No

</td>

</td>

<td style="background: var(--background-color-interactive, #EEE); color: var(--color-base, black); vertical-align: middle; white-space: nowrap; text-align: center;" class="table-Unknown">?

</td></tr>

<tr>

<td>iCore Virtual Accounts

</td>

<td><a href="Windows_XP" title="Windows XP">Windows XP</a>

</td>

<td style="background: #E7E7FF; color:black; vertical-align: middle; text-align: center;" class="table-proprietary"><a href="Freeware" title="Freeware">Freeware</a>

</td>

<td>2008

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background:#FFC7C7;color:black;vertical-align:middle;text-align:center;" class="table-no">No

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background:#FFC7C7;color:black;vertical-align:middle;text-align:center;" class="table-no">No

</td>

<td style="background:#FFC7C7;color:black;vertical-align:middle;text-align:center;" class="table-no">No

</td>

<td style="background:#FFC7C7;color:black;vertical-align:middle;text-align:center;" class="table-no">No

</td>

<td style="background:#FFC7C7;color:black;vertical-align:middle;text-align:center;" class="table-no">No

</td>

<td style="background: var(--background-color-interactive, #EEE); color: var(--color-base, black); vertical-align: middle; white-space: nowrap; text-align: center;" class="table-Unknown">?

</td>

<td style="background:#FFC7C7;color:black;vertical-align:middle;text-align:center;" class="table-no">No

</td>

<td style="background: var(--background-color-interactive, #EEE); color: var(--color-base, black); vertical-align: middle; white-space: nowrap; text-align: center;" class="table-Unknown">?

</td></tr>

<tr>

<td><a href="Sandboxie" title="Sandboxie">Sandboxie</a>

</td>

<td><a href="Microsoft_Windows" title="Microsoft Windows">Windows</a>

</td>

<td>2004

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background:#FFB; color:black;vertical-align:middle;text-align:center;" class="table-partial">Partial

</td>

<td style="background:#FFC7C7;color:black;vertical-align:middle;text-align:center;" class="table-no">No

</td>

<td style="background:#FFC7C7;color:black;vertical-align:middle;text-align:center;" class="table-no">No

</td>

<td style="background:#FFC7C7;color:black;vertical-align:middle;text-align:center;" class="table-no">No

</td>

<td style="background:#FFB; color:black;vertical-align:middle;text-align:center;" class="table-partial">Partial

</td>

<td style="background:#FFC7C7;color:black;vertical-align:middle;text-align:center;" class="table-no">No

</td>

<td style="background:#FFC7C7;color:black;vertical-align:middle;text-align:center;" class="table-no">No

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td></tr>

<tr>

<td><a href="Systemd-nspawn" class="mw-redirect" title="Systemd-nspawn">systemd-nspawn</a>

</td>

<td><a href="Linux" title="Linux">Linux</a>

</td>

<td>2010

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

</td>

</td>

</td>

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background: var(--background-color-interactive, #EEE); color: var(--color-base, black); vertical-align: middle; white-space: nowrap; text-align: center;" class="table-Unknown">?

</td>

<td style="background: var(--background-color-interactive, #EEE); color: var(--color-base, black); vertical-align: middle; white-space: nowrap; text-align: center;" class="table-Unknown">?

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td></tr>

<tr>

<td><a href="Turbo_(software)" title="Turbo (software)">Turbo</a>

</td>

<td><a href="Microsoft_Windows" title="Microsoft Windows">Windows</a>

</td>

<td style="background: #E7E7FF; color:black; vertical-align: middle; text-align: center;" class="table-proprietary"><a href="Freemium" title="Freemium">Freemium</a>

</td>

<td>2012

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background:#FFC7C7;color:black;vertical-align:middle;text-align:center;" class="table-no">No

</td>

<td style="background:#FFC7C7;color:black;vertical-align:middle;text-align:center;" class="table-no">No

</td>

<td style="background:#FFC7C7;color:black;vertical-align:middle;text-align:center;" class="table-no">No

</td>

<td style="background:#FFC7C7;color:black;vertical-align:middle;text-align:center;" class="table-no">No

</td>

<td style="background:#FFC7C7;color:black;vertical-align:middle;text-align:center;" class="table-no">No

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background:#FFC7C7;color:black;vertical-align:middle;text-align:center;" class="table-no">No

</td>

<td style="background:#FFC7C7;color:black;vertical-align:middle;text-align:center;" class="table-no">No

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td></tr>

<tr>

<td><a href="Rocket_(software)" class="mw-redirect" title="Rocket (software)">rkt</a> (rocket)

</td>

<td><a href="Linux" title="Linux">Linux</a>

</td>

<td style="background: #9EFF9E; color:black; vertical-align: middle; text-align: center;" class="active table-active"><a href="Apache_License" title="Apache License">Apache License 2.0</a>

</td>

<td>2014<a href="#cite_note-64">[43]</a>–2018

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td>

<td style="background: var(--background-color-interactive, #EEE); color: var(--color-base, black); vertical-align: middle; white-space: nowrap; text-align: center;" class="table-Unknown">?

</td>

<td style="background: var(--background-color-interactive, #EEE); color: var(--color-base, black); vertical-align: middle; white-space: nowrap; text-align: center;" class="table-Unknown">?

</td>

<td style="background:#9EFF9E;color:black;vertical-align:middle;text-align:center;" class="table-yes">Yes

</td></tr></tbody></table>

Linux containers not listed above include:

<ul><li><a href="LXC#LXD" title="LXC">LXD</a>, an alternative wrapper around <a href="LXC" title="LXC">LXC</a> developed by <a href="Canonical_(company)" title="Canonical (company)">Canonical</a><a href="#cite_note-65">[44]</a></li>

<li><a href="Podman" title="Podman">Podman</a>,<a href="#cite_note-66">[45]</a> an advanced Kubernetes ready root-less secure drop-in replacement for Docker with support for multiple container image formats, including OCI and Docker images</li>

<li>Charliecloud, a set of container tools used on HPC systems<a href="#cite_note-67">[46]</a></li>

<li>Kata Containers MicroVM Platform<a href="#cite_note-68">[47]</a></li>

<li>Bottlerocket is a Linux-based open-source operating system that is purpose-built by <a href="Amazon_Web_Services" title="Amazon Web Services">Amazon Web Services</a> for running containers on virtual machines or bare metal hosts<a href="#cite_note-69">[48]</a></li>

<li><a href="Azure_Linux" title="Azure Linux">Azure Linux</a> is an open-source Linux distribution that is purpose-built by <a href="Microsoft_Azure" title="Microsoft Azure">Microsoft Azure</a> and similar to <a href="Fedora_Linux#CoreOS" title="Fedora Linux">Fedora CoreOS</a></li></ul>

<ul><li><a href="Container_Linux" title="Container Linux">Container Linux</a></li>

<li><a href="Orchestration_(computing)" title="Orchestration (computing)">Container orchestration</a></li>

<li><a href="Flatpak" title="Flatpak">Flatpak</a> package manager</li>

<li><a href="Cgroups" title="Cgroups">Linux cgroups</a></li>

<li><a href="Linux_namespaces" title="Linux namespaces">Linux namespaces</a></li>

<li><a href="Hypervisor" title="Hypervisor">Hypervisor</a></li>

<li><a href="Portable_application_creators" class="mw-redirect" title="Portable application creators">Portable application creators</a></li>

<li><a href="Open_Container_Initiative" title="Open Container Initiative">Open Container Initiative</a></li>

<li><a href="Sandbox_(software_development)" title="Sandbox (software development)">Sandbox (software development)</a></li>

<li><a href="Separation_kernel" title="Separation kernel">Separation kernel</a></li>

<li><a href="Serverless_computing" title="Serverless computing">Serverless computing</a></li>

<li><a href="Snap_(software)" title="Snap (software)">Snap</a> package manager</li>

<li><a href="Storage_hypervisor" class="mw-redirect" title="Storage hypervisor">Storage hypervisor</a></li>

<li><a href="Virtual_private_server" title="Virtual private server">Virtual private server</a> (VPS)</li>

<li><a href="Virtual_resource_partitioning" title="Virtual resource partitioning">Virtual resource partitioning</a></li></ul>

<div class="mw-heading mw-heading2"><h2 id="Notes">Notes</h2></div>

/* start https://en.wikipedia.org/ */

.mw-parser-output .reflist{margin-bottom:0.5em;list-style-type:decimal}@media screen{.mw-parser-output .reflist{font-size:90%}}.mw-parser-output .reflist .references{font-size:100%;margin-bottom:0;list-style-type:inherit}.mw-parser-output .reflist-columns-2{column-width:30em}.mw-parser-output .reflist-columns-3{column-width:25em}.mw-parser-output .reflist-columns{margin-top:0.3em}.mw-parser-output .reflist-columns ol{margin-top:0}.mw-parser-output .reflist-columns li{page-break-inside:avoid;break-inside:avoid-column}.mw-parser-output .reflist-upper-alpha{list-style-type:upper-alpha}.mw-parser-output .reflist-upper-roman{list-style-type:upper-roman}.mw-parser-output .reflist-lower-alpha{list-style-type:lower-alpha}.mw-parser-output .reflist-lower-greek{list-style-type:lower-greek}.mw-parser-output .reflist-lower-roman{list-style-type:lower-roman}

/* end https://en.wikipedia.org/ */

</style><div class="reflist reflist-columns references-column-width reflist-lower-alpha" style="column-width: 30em;">

<li id="cite_note-root-escape-10"><a href="#cite_ref-root-escape_10-0">^</a> Root user can easily escape from chroot. Chroot was never supposed to be used as a security mechanism.<a href="#cite_note-9">[9]</a>

</li>

<li id="cite_note-docker-disk-quotas-15"><a href="#cite_ref-docker-disk-quotas_15-0">^</a> For btrfs, overlay2, windowsfilter, and zfs storage drivers.

</li>

<li id="cite_note-cfq-16">^ <a href="#cite_ref-cfq_16-0">a</a> <a href="#cite_ref-cfq_16-1">b</a> Using the <a href="CFQ" class="mw-redirect" title="CFQ">CFQ</a> scheduler, there is a separate queue per guest.

</li>

<li id="cite_note-vserver-net-17">^ <a href="#cite_ref-vserver-net_17-0">a</a> <a href="#cite_ref-vserver-net_17-1">b</a> Networking is based on isolation, not virtualization.

</li>

<li id="cite_note-linux-vserver-paper-19">^ <a href="#cite_ref-linux-vserver-paper_19-0">a</a> <a href="#cite_ref-linux-vserver-paper_19-1">b</a> A total of 14 user capabilities are considered safe within a container. The rest may cannot be granted to processes within that container without allowing that process to potentially interfere with things outside that container.<a href="#cite_note-18">[14]</a>

</li>

<li id="cite_note-lxc-dq-21"><a href="#cite_ref-lxc-dq_21-0">^</a> Disk quotas per container are possible when using separate partitions for each container with the help of <a href="Logical_Volume_Manager_(Linux)" title="Logical Volume Manager (Linux)">LVM</a>, or when the underlying host filesystem is btrfs, in which case btrfs subvolumes are automatically used.

</li>

<li id="cite_note-lxc-iolimit-22"><a href="#cite_ref-lxc-iolimit_22-0">^</a> I/O rate limiting is supported when using <a href="Btrfs" title="Btrfs">Btrfs</a>.

</li>

<li id="cite_note-ioprio-28"><a href="#cite_ref-ioprio_28-0">^</a> Available since Linux kernel 2.6.18-028stable021. Implementation is based on CFQ disk I/O scheduler, but it is a two-level schema, so I/O priority is not per-process, but rather per-container.<a href="#cite_note-27">[20]</a>

</li>

<li id="cite_note-vn-29">^ <a href="#cite_ref-vn_29-0">a</a> <a href="#cite_ref-vn_29-1">b</a> Each container can have its own IP addresses, firewall rules, routing tables and so on. Three different networking schemes are possible: route-based, bridge-based, and assigning a real network device (<a href="Network_interface_controller" title="Network interface controller">NIC</a>) to a container.

</li>

<li id="cite_note-docker-inside-openvz-31"><a href="#cite_ref-docker-inside-openvz_31-0">^</a> Docker containers can run inside OpenVZ containers.<a href="#cite_note-30">[21]</a>

</li>

<li id="cite_note-openvz-wiki-container-33"><a href="#cite_ref-openvz-wiki-container_33-0">^</a> Each container may have root access without possibly affecting other containers.<a href="#cite_note-32">[22]</a>

</li>

<li id="cite_note-vz4-35"><a href="#cite_ref-vz4_35-0">^</a> Available since version 4.0, January 2008.

</li>

<li id="cite_note-vz-docker-inside-ct-37"><a href="#cite_ref-vz-docker-inside-ct_37-0">^</a> Docker containers can run inside Virtuozzo containers.<a href="#cite_note-36">[24]</a>

</li>

<li id="cite_note-solaris-iolimit-39"><a href="#cite_ref-solaris-iolimit_39-0">^</a> Yes with illumos<a href="#cite_note-38">[25]</a>

</li>

<li id="cite_note-crossbow-40"><a href="#cite_ref-crossbow_40-0">^</a> See <a href="Solaris_network_virtualization_and_resource_control" title="Solaris network virtualization and resource control">Solaris network virtualization and resource control</a> for more details.

</li>

<li id="cite_note-solaris-nested-43"><a href="#cite_ref-solaris-nested_43-0">^</a> Only when top level is a KVM zone (illumos) or a kz zone (Oracle).

</li>

<li id="cite_note-kernelzone-44"><a href="#cite_ref-kernelzone_44-0">^</a> Starting in Solaris 11.3 Beta, Solaris Kernel Zones may use live migration.

</li>

<li id="cite_note-coldmig-45"><a href="#cite_ref-coldmig_45-0">^</a> Cold migration (shutdown-move-restart) is implemented.

</li>

<li id="cite_note-solaris-E29024-47"><a href="#cite_ref-solaris-E29024_47-0">^</a> Non-global zones are restricted so they may not affect other zones via a capability-limiting approach. The global zone may administer the non-global zones.<a href="#cite_note-46">[28]</a>

</li>

<li id="cite_note-49"><a href="#cite_ref-49">^</a> Check the "allow.quotas" option and the "Jails and file systems" section on the <a rel="nofollow" class="external text" href="http://www.freebsd.org/cgi/man.cgi?query%3Djail&sektion%3D8">FreeBSD jail man page</a> for details.

</li>

<li id="cite_note-60"><a href="#cite_ref-60">^</a> Available since TL 02.<a href="#cite_note-59">[39]</a>

</li>

</ol></div>

<div class="mw-heading mw-heading2"><h2 id="References">References</h2></div>

/* start https://en.wikipedia.org/ */

.mw-parser-output cite.citation{font-style:inherit;word-wrap:break-word}.mw-parser-output .citation q{quotes:"\"""\"""'""'"}.mw-parser-output .citation:target{background-color:rgba(0,127,255,0.133)}.mw-parser-output .id-lock-free.id-lock-free a{background:url("./mw/Lock-green.svg")right 0.1em center/9px no-repeat}.mw-parser-output .id-lock-limited.id-lock-limited a,.mw-parser-output .id-lock-registration.id-lock-registration a{background:url("./mw/Lock-gray-alt-2.svg")right 0.1em center/9px no-repeat}.mw-parser-output .id-lock-subscription.id-lock-subscription a{background:url("./mw/Lock-red-alt-2.svg")right 0.1em center/9px no-repeat}.mw-parser-output .cs1-ws-icon a{background:url("./mw/Wikisource-logo.svg")right 0.1em center/12px no-repeat}body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-free a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-limited a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-registration a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-subscription a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .cs1-ws-icon a{background-size:contain;padding:0 1em 0 0}.mw-parser-output .cs1-code{color:inherit;background:inherit;border:none;padding:inherit}.mw-parser-output .cs1-hidden-error{display:none;color:var(--color-error,#d33)}.mw-parser-output .cs1-visible-error{color:var(--color-error,#d33)}.mw-parser-output .cs1-maint{display:none;color:#085;margin-left:0.3em}.mw-parser-output .cs1-kern-left{padding-left:0.2em}.mw-parser-output .cs1-kern-right{padding-right:0.2em}.mw-parser-output .citation .mw-selflink{font-weight:inherit}@media screen{.mw-parser-output .cs1-format{font-size:95%}html.skin-theme-clientpref-night .mw-parser-output .cs1-maint{color:#18911f}}@media screen and (prefers-color-scheme:dark){html.skin-theme-clientpref-os .mw-parser-output .cs1-maint{color:#18911f}}

/* end https://en.wikipedia.org/ */

</style><cite id="CITEREFHogg2014" class="citation web cs1">Hogg, Scott (2014-05-26). <a rel="nofollow" class="external text" href="https://www.networkworld.com/article/749098/cisco-subnet-software-containers-used-more-frequently-than-most-realize.html">"Software containers: Used more frequently than most realize"</a>. <a href="Network_World" class="mw-redirect" title="Network World">Network World</a>. Network world, Inc. Retrieved 2015-07-09. <q>There are many other OS-level virtualization systems such as: Linux OpenVZ, Linux-VServer, FreeBSD Jails, AIX Workload Partitions (WPARs), HP-UX Containers (SRP), Solaris Containers, among others.</q></cite>

</li>

<li id="cite_note-2"><a href="#cite_ref-2">^</a> <cite id="CITEREFRami" class="citation web cs1">Rami, Rosen. <a rel="nofollow" class="external text" href="http://www.netdevconf.org/1.1/proceedings/slides/rosen-namespaces-cgroups-lxc.pdf">"Namespaces and Cgroups, the basis of Linux Containers"</a> (PDF). Retrieved 18 August 2016.</cite>

</li>

<li id="cite_note-3"><a href="#cite_ref-3">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://aws.amazon.com/blogs/containers/secure-bottlerocket-deployments-on-amazon-eks-with-kubearmor/">"Secure Bottlerocket deployments on Amazon EKS with KubeArmor | Containers"</a>. aws.amazon.com. 2022-10-20. Retrieved 2023-06-20.</cite>

</li>

<li id="cite_note-4"><a href="#cite_ref-4">^</a> <cite id="CITEREFKorffHopePotter2005" class="citation book cs1">Korff, Yanek; Hope, Paco; Potter, Bruce (2005). <a rel="nofollow" class="external text" href="https://books.google.com/books?id=gqKwaHmXp4YC&pg=PA59">Mastering FreeBSD and OpenBSD security</a>. O'Reilly Series. O'Reilly Media, Inc. p. 59. <a href="ISBN_(identifier)" class="mw-redirect" title="ISBN (identifier)">ISBN</a> <bdi>0596006268</bdi>.</cite>

</li>

<li id="cite_note-5"><a href="#cite_ref-5">^</a> <cite id="CITEREFHuang2015" class="citation book cs1">Huang, D. (2015). "Experiences in using os-level virtualization for block I/O". <a rel="nofollow" class="external text" href="https://www.pdsw.org/pdsw15/papers/p13-huang.pdf">Proceedings of the 10th Parallel Data Storage Workshop</a> (PDF). pp. 13–18. <a href="Doi_(identifier)" class="mw-redirect" title="Doi (identifier)">doi</a>:<a rel="nofollow" class="external text" href="https://doi.org/10.1145%2F2834976.2834982">10.1145/2834976.2834982</a>. <a href="ISBN_(identifier)" class="mw-redirect" title="ISBN (identifier)">ISBN</a> <bdi>9781450340083</bdi>. <a href="S2CID_(identifier)" class="mw-redirect" title="S2CID (identifier)">S2CID</a> <a rel="nofollow" class="external text" href="https://api.semanticscholar.org/CorpusID:3867190">3867190</a>.</cite>

</li>

<li id="cite_note-6"><a href="#cite_ref-6">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="http://docs.oracle.com/cd/E19044-01/sol.containers/817-1592/zones.intro-1/index.html">"System administration guide: Oracle Solaris containers-resource management and Oracle Solaris zones, Chapter 16: Introduction to Solaris zones"</a>. <a href="Oracle_Corporation" title="Oracle Corporation">Oracle Corporation</a>. 2010. Retrieved 2014-09-02.</cite>

</li>

<li id="cite_note-7"><a href="#cite_ref-7">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="http://docs.oracle.com/cd/E19044-01/sol.containers/817-1592/gchhy/index.html">"System administration guide: Oracle Solaris containers-resource management and Oracle Solaris zones, Chapter 31: About branded zones and the Linux branded zone"</a>. <a href="Oracle_Corporation" title="Oracle Corporation">Oracle Corporation</a>. 2010. Retrieved 2014-09-02.</cite>

</li>

<li id="cite_note-8"><a href="#cite_ref-8">^</a> <cite id="CITEREFBryan_Cantrill2014" class="citation web cs1">Bryan Cantrill (2014-09-28). <a rel="nofollow" class="external text" href="https://www.slideshare.net/bcantrill/illumos-lx">"The dream is alive! Running Linux containers on an illumos kernel"</a>. slideshare.net. Retrieved 2014-10-10.</cite>

</li>

<li id="cite_note-9"><a href="#cite_ref-9">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="http://www.freebsd.org/doc/en/books/developers-handbook/secure-chroot.html">"3.5. Limiting your program's environment"</a>. freebsd.org.</cite>

</li>

<li id="cite_note-11"><a href="#cite_ref-11">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="http://www.infoq.com/news/2014/03/docker_0_9">"Docker drops LXC as default execution environment"</a>. InfoQ.</cite>

</li>

<li id="cite_note-12"><a href="#cite_ref-12">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://docs.docker.com/desktop/install/windows-install/">"Install Docker desktop on Windows | Docker documentation"</a>. Docker. 9 February 2023.</cite>

</li>

<li id="cite_note-13"><a href="#cite_ref-13">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://docs.docker.com/docker-for-mac/">"Get started with Docker desktop for Mac"</a>. Docker documentation. December 6, 2019.</cite>

</li>

<li id="cite_note-14"><a href="#cite_ref-14">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://docs.docker.com/reference/cli/docker/container/run/#storage-opt">"docker container run - Set storage driver options per container (--storage-opt)"</a>. docs.docker.com. 22 February 2024.</cite>

</li>

<li id="cite_note-18"><a href="#cite_ref-18">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="http://linux-vserver.org/Paper#Secure_Capabilities">"Paper - Linux-VServer"</a>. linux-vserver.org.</cite>

</li>

<li id="cite_note-lxc-1-0-security-features-20">^ <a href="#cite_ref-lxc-1-0-security-features_20-0">a</a> <a href="#cite_ref-lxc-1-0-security-features_20-1">b</a> <cite id="CITEREFGraber2014" class="citation web cs1">Graber, Stéphane (1 January 2014). <a rel="nofollow" class="external text" href="https://www.stgraber.org/2014/01/01/lxc-1-0-security-features/">"LXC 1.0: Security features [6/10]"</a>. Retrieved 12 February 2014. <q>LXC now has support for user namespaces. [...] LXC is no longer running as root so even if an attacker manages to escape the container, he'd find himself having the privileges of a regular user on the host.</q></cite>

</li>

<li id="cite_note-23"><a href="#cite_ref-23">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.top500.org/news/sylabs-brings-singularity-containers-into-commercial-hpc/">"Sylabs brings Singularity containers into commercial HPC | Top 500 supercomputer sites"</a>. www.top500.org.</cite>

</li>

<li id="cite_note-24"><a href="#cite_ref-24">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.sylabs.io/2018/03/sif-containing-your-containers/">"SIF — Containing your containers"</a>. www.sylabs.io. 14 March 2018.</cite>

</li>

<li id="cite_note-25"><a href="#cite_ref-25">^</a> <cite id="CITEREFKurtzerSochatBauer2017" class="citation journal cs1">Kurtzer, Gregory M.; Sochat, Vanessa; Bauer, Michael W. (May 11, 2017). <a rel="nofollow" class="external text" href="https://www.ncbi.nlm.nih.gov/pmc/articles/PMC5426675">"Singularity: Scientific containers for mobility of compute"</a>. PLOS ONE. 12 (5): e0177459. <a href="Bibcode_(identifier)" class="mw-redirect" title="Bibcode (identifier)">Bibcode</a>:<a rel="nofollow" class="external text" href="https://ui.adsabs.harvard.edu/abs/2017PLoSO..1277459K">2017PLoSO..1277459K</a>. <a href="Doi_(identifier)" class="mw-redirect" title="Doi (identifier)">doi</a>:<a rel="nofollow" class="external text" href="https://doi.org/10.1371%2Fjournal.pone.0177459">10.1371/journal.pone.0177459</a>. <a href="PMC_(identifier)" class="mw-redirect" title="PMC (identifier)">PMC</a> <a rel="nofollow" class="external text" href="https://www.ncbi.nlm.nih.gov/pmc/articles/PMC5426675">5426675</a>. <a href="PMID_(identifier)" class="mw-redirect" title="PMID (identifier)">PMID</a> <a rel="nofollow" class="external text" href="https://pubmed.ncbi.nlm.nih.gov/28494014">28494014</a>.</cite>

</li>

<li id="cite_note-26"><a href="#cite_ref-26">^</a> <cite id="CITEREFBronnikov" class="citation web cs1">Bronnikov, Sergey. <a rel="nofollow" class="external text" href="https://wiki.openvz.org/Comparison">"Comparison on OpenVZ wiki page"</a>. OpenVZ Wiki. OpenVZ. Retrieved 28 December 2018.</cite>

</li>

<li id="cite_note-27"><a href="#cite_ref-27">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://wiki.openvz.org/I/O_priorities_for_VE">"I/O priorities for containers"</a>. OpenVZ Virtuozzo Containers Wiki.</cite>

</li>

<li id="cite_note-30"><a href="#cite_ref-30">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://openvz.org/Docker_inside_CT">"Docker inside CT"</a>.</cite>

</li>

<li id="cite_note-32"><a href="#cite_ref-32">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://wiki.openvz.org/Container">"Container"</a>. OpenVZ Virtuozzo Containers Wiki.</cite>

</li>

<li id="cite_note-aspcomplete-34"><a href="#cite_ref-aspcomplete_34-0">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="http://www.paul.sladen.org/vserver/aspcomplete/2000-08-25/ve-0.4.2-for-2.4.0-test6.diff.gz">"Initial public prerelease of Virtuozzo (named ASPcomplete at that time)"</a>.</cite>

</li>

<li id="cite_note-36"><a href="#cite_ref-36">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="http://www.odin.com/news/pr/release/article/parallels-virtuozzo-now-provides-native-support-for-docker/">"Parallels Virtuozzo now provides native support for Docker"</a>.</cite>

</li>

<li id="cite_note-38"><a href="#cite_ref-38">^</a> <cite id="CITEREFPijewski2011" class="citation web cs1">Pijewski, Bill (March 1, 2011). <a rel="nofollow" class="external text" href="https://wdp.dtrace.org/2011/03/our-zfs-io-throttle/">"Our ZFS I/O Throttle"</a>. wdp.dtrace.org.</cite>

</li>

<li id="cite_note-41"><a href="#cite_ref-41">^</a> <a rel="nofollow" class="external text" href="http://www.opensolaris.org/os/project/crossbow/faq/">Network virtualization and resource control (Crossbow) FAQ</a> <a rel="nofollow" class="external text" href="https://web.archive.org/web/20080601182802/http://www.opensolaris.org/os/project/crossbow/faq/">Archived</a> 2008-06-01 at the <a href="Wayback_Machine" title="Wayback Machine">Wayback Machine</a>

</li>

<li id="cite_note-42"><a href="#cite_ref-42">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://docs.oracle.com/cd/E37838_01/html/E60989/index.html">"Managing network virtualization and network resources in Oracle® Solaris 11.4"</a>. docs.oracle.com.</cite>

</li>

<li id="cite_note-46"><a href="#cite_ref-46">^</a> Oracle Solaris 11.1 administration, Oracle Solaris zones, Oracle Solaris 10 zones and resource management E29024.pdf, pp. 356–360. Available <a rel="nofollow" class="external text" href="http://www.oracle.com/technetwork/documentation/solaris-11-192991.html">within an archive</a>.

</li>

<li id="cite_note-48"><a href="#cite_ref-48">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="http://www.cybera.ca/news-and-events/tech-radar/contain-your-enthusiasm-part-two-jails-zones-openvz-and-lxc/">"Contain your enthusiasm - Part two: Jails, zones, OpenVZ, and LXC"</a>. <q>Jails were first introduced in FreeBSD 4.0 in 2000</q></cite>

</li>

<li id="cite_note-rctl-50"><a href="#cite_ref-rctl_50-0">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="http://wiki.freebsd.org/Hierarchical_Resource_Limits">"Hierarchical resource limits - FreeBSD Wiki"</a>. Wiki.freebsd.org. 2012-10-27. Retrieved 2014-01-15.</cite>

</li>

<li id="cite_note-51"><a href="#cite_ref-51">^</a> <cite id="CITEREFZec2003" class="citation web cs1">Zec, Marko (2003-06-13). <a rel="nofollow" class="external text" href="http://static.usenix.org/publications/library/proceedings/usenix03/tech/freenix03/full_papers/zec/zec.pdf">"Implementing a clonable network stack in the FreeBSD kernel"</a> (PDF). usenix.org.</cite>

</li>

<li id="cite_note-freebsdvps-52"><a href="#cite_ref-freebsdvps_52-0">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="http://www.7he.at/freebsd/vps/">"VPS for FreeBSD"</a>. Retrieved 2016-02-20.</cite>

</li>

<li id="cite_note-freebsdvpsannounce-53"><a href="#cite_ref-freebsdvpsannounce_53-0">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://forums.freebsd.org/threads/34284/">"[Announcement] VPS // OS virtualization // alpha release"</a>. 31 August 2012. Retrieved 2016-02-20.</cite>

</li>

<li id="cite_note-54"><a href="#cite_ref-54">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="http://www.freebsd.org/doc/en/books/developers-handbook/secure-chroot.html">"3.5. Limiting your program's environment"</a>. Freebsd.org. Retrieved 2014-01-15.</cite>

</li>

<li id="cite_note-vkernel.h-55"><a href="#cite_ref-vkernel.h_55-0">^</a> <cite id="CITEREFMatthew_Dillon2006" class="citation web cs1"><a href="Matthew_Dillon" title="Matthew Dillon">Matthew Dillon</a> (2006). <a rel="nofollow" class="external text" href="http://bxr.su/d/sys/sys/vkernel.h">"sys/vkernel.h"</a>. BSD cross reference. <a href="DragonFly_BSD" title="DragonFly BSD">DragonFly BSD</a>.</cite>

</li>

<li id="cite_note-vkd.4-56">^ <a href="#cite_ref-vkd.4_56-0">a</a> <a href="#cite_ref-vkd.4_56-1">b</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="http://mdoc.su/d/vkd.4">"vkd(4) — Virtual kernel disc"</a>. <a href="DragonFly_BSD" title="DragonFly BSD">DragonFly BSD</a>. <q>treats the disk image as copy-on-write.</q></cite>

</li>

<li id="cite_note-vkernel.7-57">^ <a href="#cite_ref-vkernel.7_57-0">a</a> <a href="#cite_ref-vkernel.7_57-1">b</a> <cite id="CITEREFSascha_Wildner2007" class="citation web cs1">Sascha Wildner (2007-01-08). <a rel="nofollow" class="external text" href="http://bxr.su/d/share/man/man7/vkernel.7">"vkernel, vcd, vkd, vke — virtual kernel architecture"</a>. DragonFly miscellaneous information manual. <a href="DragonFly_BSD" title="DragonFly BSD">DragonFly BSD</a>.</cite>

<ul><li><cite class="citation book cs1">"vkernel, vcd, vkd, vke - virtual kernel architecture". <a rel="nofollow" class="external text" href="http://mdoc.su/d/vkernel.7">DragonFly miscellaneous information manual</a>.</cite></li></ul>

</li>

<li id="cite_note-vke.4-58"><a href="#cite_ref-vke.4_58-0">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="http://mdoc.su/d/vke.4">"vkernel, vcd, vkd, vke - virtual kernel architecture"</a>. DragonFly On-Line Manual Pages. <a href="DragonFly_BSD" title="DragonFly BSD">DragonFly BSD</a>.</cite>

</li>

<li id="cite_note-59"><a href="#cite_ref-59">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="http://www-01.ibm.com/support/docview.wss?uid=isg1fixinfo109461">"IBM fix pack information for: WPAR network isolation - United States"</a>. ibm.com. 21 July 2011.</cite>

</li>

<li id="cite_note-61"><a href="#cite_ref-61">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="http://www.ibm.com/developerworks/aix/library/au-aix61mobility/index.html">"Live application mobility in AIX 6.1"</a>. www.ibm.com. June 3, 2008.</cite>

</li>

<li id="cite_note-systemd-nspawn_manual-62">^ <a href="#cite_ref-systemd-nspawn_manual_62-0">a</a> <a href="#cite_ref-systemd-nspawn_manual_62-1">b</a> <a href="#cite_ref-systemd-nspawn_manual_62-2">c</a> <a href="#cite_ref-systemd-nspawn_manual_62-3">d</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.freedesktop.org/software/systemd/man/systemd-nspawn.html#--property=">"systemd-nspawn"</a>. www.freedesktop.org.</cite>

</li>

<li id="cite_note-Systemd_service_unit_files_parameters-63">^ <a href="#cite_ref-Systemd_service_unit_files_parameters_63-0">a</a> <a href="#cite_ref-Systemd_service_unit_files_parameters_63-1">b</a> <a href="#cite_ref-Systemd_service_unit_files_parameters_63-2">c</a> <a href="#cite_ref-Systemd_service_unit_files_parameters_63-3">d</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/resource_management_guide/sec-modifying_control_groups">"2.3. Modifying control groups Red Hat Enterprise Linux 7"</a>. Red Hat Customer portal.</cite>

</li>

<li id="cite_note-64"><a href="#cite_ref-64">^</a> <cite id="CITEREFPolvi" class="citation web cs1">Polvi, Alex. <a rel="nofollow" class="external text" href="https://web.archive.org/web/20190401013449/https://coreos.com/blog/rocket.html">"CoreOS is building a container runtime, rkt"</a>. CoreOS Blog. Archived from <a rel="nofollow" class="external text" href="https://coreos.com/blog/rocket.html">the original</a> on 2019-04-01. Retrieved 12 March 2019.</cite>

</li>

<li id="cite_note-65"><a href="#cite_ref-65">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://linuxcontainers.org/lxd/">"LXD"</a>. linuxcontainers.org. Retrieved 2021-02-11.</cite>

</li>

<li id="cite_note-66"><a href="#cite_ref-66">^</a> <a rel="nofollow" class="external text" href="https://indico.cern.ch/event/757415/contributions/3421994/attachments/1855302/3047064/Podman_Rootless_Containers.pdf">Rootless containers with Podman and fuse-overlayfs</a>, CERN workshop, 2019-06-04

</li>

<li id="cite_note-67"><a href="#cite_ref-67">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://charliecloud.io/latest/">"Overview — Charliecloud"</a>. Retrieved 22 June 2025.</cite>

</li>

<li id="cite_note-68"><a href="#cite_ref-68">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://katacontainers.io/">"Home"</a>. katacontainers.io.</cite>

</li>

<li id="cite_note-69"><a href="#cite_ref-69">^</a> <cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://aws.amazon.com/bottlerocket/">"Bottlerocket - Linux-based operating system purpose-built to run containers"</a>.</cite>

</li>

</ol></div>

<div class="mw-heading mw-heading2"><h2 id="External_links">External links</h2></div>

<ul><li><a rel="nofollow" class="external text" href="https://www.kernelthread.com/publications/virtualization/">An introduction to virtualization</a> <a rel="nofollow" class="external text" href="https://web.archive.org/web/20191128152118/http://www.kernelthread.com/publications/virtualization">Archived</a> 2019-11-28 at the <a href="Wayback_Machine" title="Wayback Machine">Wayback Machine</a></li>

<li><a rel="nofollow" class="external text" href="https://wiki.openvz.org/Introduction_to_virtualization">A short intro to three different virtualization techniques</a></li>

<li><a rel="nofollow" class="external text" href="https://thijs.ai/papers/scheepers-virtualization-containerization.pdf">Virtualization and containerization of application infrastructure: A comparison</a> <a rel="nofollow" class="external text" href="https://web.archive.org/web/20230315103310/https://thijs.ai/papers/scheepers-virtualization-containerization.pdf">Archived</a> 2023-03-15 at the <a href="Wayback_Machine" title="Wayback Machine">Wayback Machine</a>, June 22, 2015, by Mathijs Jeroen Scheepers</li>

<li><a rel="nofollow" class="external text" href="https://lwn.net/Articles/646054/">Containers and persistent data</a>, <a href="LWN.net" title="LWN.net">LWN.net</a>, May 28, 2015, by Josh Berkus</li></ul>

/* start https://en.wikipedia.org/ */

.mw-parser-output .hlist dl,.mw-parser-output .hlist ol,.mw-parser-output .hlist ul{margin:0;padding:0}.mw-parser-output .hlist dd,.mw-parser-output .hlist dt,.mw-parser-output .hlist li{margin:0;display:inline}.mw-parser-output .hlist.inline,.mw-parser-output .hlist.inline dl,.mw-parser-output .hlist.inline ol,.mw-parser-output .hlist.inline ul,.mw-parser-output .hlist dl dl,.mw-parser-output .hlist dl ol,.mw-parser-output .hlist dl ul,.mw-parser-output .hlist ol dl,.mw-parser-output .hlist ol ol,.mw-parser-output .hlist ol ul,.mw-parser-output .hlist ul dl,.mw-parser-output .hlist ul ol,.mw-parser-output .hlist ul ul{display:inline}.mw-parser-output .hlist .mw-empty-li{display:none}.mw-parser-output .hlist dt::after{content:": "}.mw-parser-output .hlist dd::after,.mw-parser-output .hlist li::after{content:" · ";font-weight:bold}.mw-parser-output .hlist dd:last-child::after,.mw-parser-output .hlist dt:last-child::after,.mw-parser-output .hlist li:last-child::after{content:none}.mw-parser-output .hlist dd dd:first-child::before,.mw-parser-output .hlist dd dt:first-child::before,.mw-parser-output .hlist dd li:first-child::before,.mw-parser-output .hlist dt dd:first-child::before,.mw-parser-output .hlist dt dt:first-child::before,.mw-parser-output .hlist dt li:first-child::before,.mw-parser-output .hlist li dd:first-child::before,.mw-parser-output .hlist li dt:first-child::before,.mw-parser-output .hlist li li:first-child::before{content:" (";font-weight:normal}.mw-parser-output .hlist dd dd:last-child::after,.mw-parser-output .hlist dd dt:last-child::after,.mw-parser-output .hlist dd li:last-child::after,.mw-parser-output .hlist dt dd:last-child::after,.mw-parser-output .hlist dt dt:last-child::after,.mw-parser-output .hlist dt li:last-child::after,.mw-parser-output .hlist li dd:last-child::after,.mw-parser-output .hlist li dt:last-child::after,.mw-parser-output .hlist li li:last-child::after{content:")";font-weight:normal}.mw-parser-output .hlist ol{counter-reset:listitem}.mw-parser-output .hlist ol>li{counter-increment:listitem}.mw-parser-output .hlist ol>li::before{content:" "counter(listitem)"\a0 "}.mw-parser-output .hlist dd ol>li:first-child::before,.mw-parser-output .hlist dt ol>li:first-child::before,.mw-parser-output .hlist li ol>li:first-child::before{content:" ("counter(listitem)"\a0 "}

/* end https://en.wikipedia.org/ */

</style><style data-mw-deduplicate="TemplateStyles:r1236075235">

/* start https://en.wikipedia.org/ */

.mw-parser-output .navbox{box-sizing:border-box;border:1px solid #a2a9b1;width:100%;clear:both;font-size:88%;text-align:center;padding:1px;margin:1em auto 0}.mw-parser-output .navbox .navbox{margin-top:0}.mw-parser-output .navbox+.navbox,.mw-parser-output .navbox+.navbox-styles+.navbox{margin-top:-1px}.mw-parser-output .navbox-inner,.mw-parser-output .navbox-subgroup{width:100%}.mw-parser-output .navbox-group,.mw-parser-output .navbox-title,.mw-parser-output .navbox-abovebelow{padding:0.25em 1em;line-height:1.5em;text-align:center}.mw-parser-output .navbox-group{white-space:nowrap;text-align:right}.mw-parser-output .navbox,.mw-parser-output .navbox-subgroup{background-color:#fdfdfd}.mw-parser-output .navbox-list{line-height:1.5em;border-color:#fdfdfd}.mw-parser-output .navbox-list-with-group{text-align:left;border-left-width:2px;border-left-style:solid}.mw-parser-output tr+tr>.navbox-abovebelow,.mw-parser-output tr+tr>.navbox-group,.mw-parser-output tr+tr>.navbox-image,.mw-parser-output tr+tr>.navbox-list{border-top:2px solid #fdfdfd}.mw-parser-output .navbox-title{background-color:#ccf}.mw-parser-output .navbox-abovebelow,.mw-parser-output .navbox-group,.mw-parser-output .navbox-subgroup .navbox-title{background-color:#ddf}.mw-parser-output .navbox-subgroup .navbox-group,.mw-parser-output .navbox-subgroup .navbox-abovebelow{background-color:#e6e6ff}.mw-parser-output .navbox-even{background-color:#f7f7f7}.mw-parser-output .navbox-odd{background-color:transparent}.mw-parser-output .navbox .hlist td dl,.mw-parser-output .navbox .hlist td ol,.mw-parser-output .navbox .hlist td ul,.mw-parser-output .navbox td.hlist dl,.mw-parser-output .navbox td.hlist ol,.mw-parser-output .navbox td.hlist ul{padding:0.125em 0}.mw-parser-output .navbox .navbar{display:block;font-size:100%}.mw-parser-output .navbox-title .navbar{float:left;text-align:left;margin-right:0.5em}body.skin--responsive .mw-parser-output .navbox-image img{max-width:none!important}@media print{body.ns-0 .mw-parser-output .navbox{display:none!important}}

/* end https://en.wikipedia.org/ */

</style></div><div role="navigation" class="navbox" aria-labelledby="Virtualization_software371" style="padding:3px"><table class="nowraplinks mw-collapsible autocollapse navbox-inner" style="border-spacing:0;background:transparent;color:inherit"><tbody><tr><th scope="col" class="navbox-title" colspan="2"><style data-mw-deduplicate="TemplateStyles:r1239400231">

/* start https://en.wikipedia.org/ */

.mw-parser-output .navbar{display:inline;font-size:88%;font-weight:normal}.mw-parser-output .navbar-collapse{float:left;text-align:left}.mw-parser-output .navbar-boxtext{word-spacing:0}.mw-parser-output .navbar ul{display:inline-block;white-space:nowrap;line-height:inherit}.mw-parser-output .navbar-brackets::before{margin-right:-0.125em;content:"[ "}.mw-parser-output .navbar-brackets::after{margin-left:-0.125em;content:" ]"}.mw-parser-output .navbar li{word-spacing:-0.125em}.mw-parser-output .navbar a>span,.mw-parser-output .navbar a>abbr{text-decoration:inherit}.mw-parser-output .navbar-mini abbr{font-variant:small-caps;border-bottom:none;text-decoration:none;cursor:inherit}.mw-parser-output .navbar-ct-full{font-size:114%;margin:0 7em}.mw-parser-output .navbar-ct-mini{font-size:114%;margin:0 4em}html.skin-theme-clientpref-night .mw-parser-output .navbar li a abbr{color:var(--color-base)!important}@media(prefers-color-scheme:dark){html.skin-theme-clientpref-os .mw-parser-output .navbar li a abbr{color:var(--color-base)!important}}@media print{.mw-parser-output .navbar{display:none!important}}

/* end https://en.wikipedia.org/ */

</style><div id="Virtualization_software371" style="font-size:114%;margin:0 4em"><a href="Virtualization" title="Virtualization">Virtualization</a> software</div></th></tr><tr><td class="navbox-abovebelow" colspan="2"><div><a href="Comparison_of_platform_virtualization_software" title="Comparison of platform virtualization software">Comparison of platform virtualization software</a></div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="Hardware_virtualization" title="Hardware virtualization">Hardware</a> (<a href="Hypervisor" title="Hypervisor">hypervisors</a>)</th><td class="navbox-list-with-group navbox-list navbox-odd hlist" style="width:100%;padding:0"><div style="padding:0 0.25em"></div><table class="nowraplinks navbox-subgroup" style="border-spacing:0"><tbody><tr><th scope="row" class="navbox-group" style="width:1%">Native</th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Adaptive_Domain_Environment_for_Operating_Systems" title="Adaptive Domain Environment for Operating Systems">Adeos</a></li>

<li><a href="Hyper-V" title="Hyper-V">Hyper-V</a></li>

<ul><li><a href="OVirt" title="OVirt">oVirt</a></li>

<li>KubeVirt</li></ul></li>

<li><a href="Oracle_VM_Server_for_SPARC" title="Oracle VM Server for SPARC">LDoms / Oracle VM Server for SPARC</a></li>

<li><a href="Logical_partition" title="Logical partition">Logical partition</a> (LPAR)</li>

<li><a href="LynxSecure" title="LynxSecure">LynxSecure</a></li>

<li><a href="PikeOS" title="PikeOS">PikeOS</a></li>

<li><a href="Proxmox_Virtual_Environment" title="Proxmox Virtual Environment">Proxmox VE</a></li>

<li><a href="SIMMON" title="SIMMON">SIMMON</a></li>

<li><a href="VMware_ESXi" title="VMware ESXi">VMware ESXi</a>

<ul><li><a href="VMware_vSphere" title="VMware vSphere">VMware vSphere</a></li>

<li><a href="VCloud_Air" title="VCloud Air">vCloud</a></li></ul></li>

<li><a href="VMware_Infrastructure" title="VMware Infrastructure">VMware Infrastructure</a></li>

<ul><li><a href="XenServer" class="mw-redirect" title="XenServer">XenServer</a></li>

<li><a href="XtratuM" title="XtratuM">XtratuM</a></li>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Hosted</th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em"></div><table class="nowraplinks navbox-subgroup" style="border-spacing:0"><tbody><tr><th scope="row" class="navbox-group" style="width:1%">Specialized</th><td class="navbox-list-with-group navbox-list navbox-even" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Basilisk_II" title="Basilisk II">Basilisk II</a></li>

<li><a href="Bochs" title="Bochs">Bochs</a></li>

<li><a href="Cooperative_Linux" title="Cooperative Linux">Cooperative Linux</a></li>

<li><a href="DOSBox" title="DOSBox">DOSBox</a></li>

<li><a href="DOSEMU" title="DOSEMU">DOSEMU</a></li>

<li><a href="PikeOS" title="PikeOS">PikeOS</a></li>

<li><a href="SheepShaver" title="SheepShaver">SheepShaver</a></li>

<li><a href="Windows_on_Windows" title="Windows on Windows">Windows on Windows</a>

<ul><li><a href="Virtual_DOS_machine" title="Virtual DOS machine">Virtual DOS machine</a></li></ul></li>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Independent</th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Bhyve" title="Bhyve">bhyve</a></li>

<li><a href="Microsoft_Virtual_Server" title="Microsoft Virtual Server">Microsoft Virtual Server</a></li>

<li><a href="Parallels_Workstation" title="Parallels Workstation">Parallels Workstation</a> (<a href="Parallels_Workstation_Extreme" title="Parallels Workstation Extreme">Extreme</a>)</li>

<li><a href="Parallels_Desktop_for_Mac" title="Parallels Desktop for Mac">Parallels Desktop for Mac</a></li>

<li><a href="Parallels_Server_for_Mac" class="mw-redirect" title="Parallels Server for Mac">Parallels Server for Mac</a></li>

<li><a href="PearPC" title="PearPC">PearPC</a></li>

<li><a href="VirtualBox" title="VirtualBox">VirtualBox</a></li>

<li><a href="Virtual_Iron" title="Virtual Iron">Virtual Iron</a></li>

<li><a href="Virtual_PC" title="Virtual PC">Virtual PC</a></li>

<li><a href="VMware_Fusion" title="VMware Fusion">VMware Fusion</a></li>

<li><a href="VMware_Server" title="VMware Server">VMware Server</a></li>

<li><a href="VMware_Workstation" title="VMware Workstation">VMware Workstation</a> (<a href="VMware_Workstation_Player" title="VMware Workstation Player">Player</a>)</li></ul>

</div></td></tr></tbody></table><div></div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Tools</th><td class="navbox-list-with-group navbox-list navbox-even" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Ganeti" title="Ganeti">Ganeti</a></li>

<li><a href="System_Center_Virtual_Machine_Manager" title="System Center Virtual Machine Manager">System Center Virtual Machine Manager</a></li>

<li><a href="Virt-manager" title="Virt-manager">Virt-manager</a></li></ul>

</div></td></tr></tbody></table><div></div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"></th><td class="navbox-list-with-group navbox-list navbox-odd hlist" style="width:100%;padding:0"><div style="padding:0 0.25em"></div><table class="nowraplinks navbox-subgroup" style="border-spacing:0"><tbody><tr><th scope="row" class="navbox-group" style="width:1%">OS containers</th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="FreeBSD_jail" title="FreeBSD jail">FreeBSD jail</a></li>

<li>iCore Virtual Accounts</li>

<li><a href="Linux-VServer" title="Linux-VServer">Linux-VServer</a></li>

<li><a href="LXC" title="LXC">Linux Containers</a></li>

<li><a href="OpenVZ" title="OpenVZ">OpenVZ</a></li>

<li><a href="Solaris_Containers" title="Solaris Containers">Solaris Containers</a></li>

<li><a href="Virtuozzo_(company)#Software" title="Virtuozzo (company)">Virtuozzo</a></li>

<li><a href="Workload_Partitions" title="Workload Partitions">Workload Partitions</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Application containers</th><td class="navbox-list-with-group navbox-list navbox-even" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Docker_(software)" title="Docker (software)">Docker</a></li>

<li><a href="Podman" title="Podman">Podman</a></li>

<li><a href="Lmctfy" title="Lmctfy">lmctfy</a></li>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Virtual kernel architectures</th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Rump_kernel" title="Rump kernel">Rump kernel</a></li>

<li><a href="User-mode_Linux" title="User-mode Linux">User-mode Linux</a></li>

<li><a href="Vkernel" title="Vkernel">vkernel</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Related kernel features</th><td class="navbox-list-with-group navbox-list navbox-even" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Solaris_Containers#Branded_zones" title="Solaris Containers">BrandZ</a></li>

<li><a href="Cgroups" title="Cgroups">cgroups</a></li>

<li><a href="Chroot" title="Chroot">chroot</a></li>

<li><a href="Linux_namespaces" title="Linux namespaces">namespaces</a></li>

<li><a href="Seccomp" title="Seccomp">seccomp</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Orchestration</th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Amazon_Web_Services" title="Amazon Web Services">Amazon ECS</a></li>

<li><a href="Kubernetes" title="Kubernetes">Kubernetes</a></li>

<li><a href="OpenShift" title="OpenShift">OpenShift</a></li></ul>

</div></td></tr></tbody></table><div></div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="Desktop_virtualization" title="Desktop virtualization">Desktop</a></th><td class="navbox-list-with-group navbox-list navbox-even hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Citrix_Virtual_Apps" title="Citrix Virtual Apps">Citrix Virtual Apps</a></li>

<li><a href="Citrix_Virtual_Desktops" title="Citrix Virtual Desktops">Citrix Virtual Desktops</a></li>

<li><a href="Remote_Desktop_Services" title="Remote Desktop Services">Remote Desktop Services</a></li>

<li><a href="VMware_Horizon" class="mw-redirect" title="VMware Horizon">VMware Horizon</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="Application_virtualization" title="Application virtualization">Application</a></th><td class="navbox-list-with-group navbox-list navbox-odd hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Ceedo" title="Ceedo">Ceedo</a></li>

<li><a href="Citrix_Virtual_Apps" title="Citrix Virtual Apps">Citrix Virtual Apps</a></li>

<li><a href="Dalvik_(software)" title="Dalvik (software)">Dalvik</a></li>

<li><a href="InstallFree" title="InstallFree">InstallFree</a></li>

<li><a href="Microsoft_App-V" title="Microsoft App-V">Microsoft App-V</a></li>

<li><a href="Remote_Desktop_Services" title="Remote Desktop Services">Remote Desktop Services</a></li>

<li><a href="Symantec_Workspace_Virtualization" title="Symantec Workspace Virtualization">Symantec Workspace Virtualization</a></li>

<li><a href="Turbo_(software)" title="Turbo (software)">Turbo</a></li>

<li><a href="VMware_ThinApp" title="VMware ThinApp">VMware ThinApp</a></li>

<li><a href="ZeroVM" title="ZeroVM">ZeroVM</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="Network_virtualization" title="Network virtualization">Network</a></th><td class="navbox-list-with-group navbox-list navbox-even hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Distributed_Overlay_Virtual_Ethernet" title="Distributed Overlay Virtual Ethernet">Distributed Overlay Virtual Ethernet</a> (DOVE)</li>

<li><a href="Ethernet_VPN" title="Ethernet VPN">Ethernet VPN</a> (EVPN)</li>

<li><a href="Network_Virtualization_using_Generic_Routing_Encapsulation" title="Network Virtualization using Generic Routing Encapsulation">NVGRE</a></li>

<li><a href="Open_vSwitch" title="Open vSwitch">Open vSwitch</a></li>

<li><a href="Virtual_security_switch" title="Virtual security switch">Virtual security switch</a></li>

<li><a href="Virtual_Extensible_LAN" title="Virtual Extensible LAN">Virtual Extensible LAN</a> (VXLAN)</li>

<li><a href="Generic_Network_Virtualization_Encapsulation" title="Generic Network Virtualization Encapsulation">Generic Network Virtualization Encapsulation</a> (GENEVE)</li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">See also</th><td class="navbox-list-with-group navbox-list navbox-odd hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="BlueStacks" title="BlueStacks">BlueStacks</a></li></ul>

</div></td></tr><tr><td class="navbox-abovebelow" colspan="2"><div>See also: <a href="List_of_emulators" title="List of emulators">List of emulators</a>, <a href="List_of_computer_system_emulators" title="List of computer system emulators">List of computer system emulators</a></div></td></tr></tbody></table></div></div><div><div class="zim-footer">

This article is issued from <a class="external text" title="Last edited on 2025-07-17" href="https://en.wikipedia.org/wiki/?title=OS-level_virtualization&oldid=1301034759">Wikipedia</a>. The text is available under <a class="external text" href="https://creativecommons.org/licenses/by-sa/4.0/deed.en">Creative Commons Attribution-Share Alike 4.0</a> unless otherwise noted. Additional terms may apply for the media files.

</div>

</div></div>

</div>

</main>

</div>

</body></html>