Question
You know cgroups provide isolation (along with namespaces in the context of containers). But what exactly are cgroups?
Answer
cgroups enforce hard limits of subsystems to allow efficient allocation of resources of the super-system.
Cgroups allow you to allocate resources — such as CPU time, system memory, network bandwidth, or combinations of these resources — among user-defined groups of tasks (processes) running on a system.
…