Docker, LXC, giai thich mot so khai niem