Figure 2

Create secure simple containers with the systemd tools Nspawnd and Portabled

Figure 2: The kernel namespaces feature has many uses in the context of containers, allowing areas in a virtual system to be isolated from the main system (credit: Ivan Zahariev [2]).