Linux Containers but using the host's runtimeLinux network namespaces only separates the network. Docker/LXC separates everything. With frankenstein containers, you reuse the host OS binaries, thus keeping disk usage low without compromising on isolation.