Control group namespaces

https://www.toptal.com/linux/separation-anxiety-isolating-your-system-with-linux-namespaces

https://www.linuxjournal.com/content/everything-you-need-know-about-linux-containers-part-ii-working-linux-containers-lxc

https://lwn.net/Articles/531114/

https://lwn.net/Articles/604609/

https://coolshell.cn/articles/17010.html