THE ISOLATED BOX DIARIES

Upon getting your equipment configured, try the Containers tutorial for an in-depth tour of dealing with containers.cgroups, Selinux or Apparmor, normal unix permissions, Linux namespaces and Linux Capabilities all work collectively to isolate this process in such a way, that from inside the process your application just isn't mindful that it lives