A server configured to host kernel isolated containers, comprising: at least one physical processor ; at least one physical computer memory addressable via physical memory addresses, the at least one physical computer memory storing executable code for execution by the at least one physical processor , the executable code configured to provide at least one host including a kernel and at least one kernel isolated container within the at least one host, wherein the executable code providing the at least one host is configured to: allocate virtual memory having virtual memory addresses to a respective container of the at least one kernel isolated container; pin a subset of the virtual memory addresses to a subset of the physical memory addresses, wherein the subset of the virtual memory addresses includes at least one but fewer than all of the virtual memory addresses allocated to the respective container; and perform a direct memory access operation or device memory-mapped input-output operation of the respective container on the subset of the physical memory addresses; wherein an amount of the subset of the physical memory addresses is allocated based on the direct memory access operation or device memory-mapped input-output operation configured for the respective container. at least one physical processor ; at least one physical computer memory addressable via physical memory addresses, the at least one physical computer memory storing executable code for execution by the at least one physical processor , the executable code configured to provide at least one host including a kernel and at least one kernel isolated container within the at least one host, wherein the executable code providing the at least one host is configured to: allocate virtual memory having virtual memory addresses to a respective container of the at least one kernel isolated container; pin a subset of the virtual memory addresses to a subset of the physical memory addresses, wherein the subset of the virtual memory addresses includes at least one but fewer than all of the virtual memory addresses allocated to the respective container; and perform a direct memory access operation or device memory-mapped input-output operation of the respective container on the subset of the physical memory addresses; wherein an amount of the subset of the physical memory addresses is allocated based on the direct memory access operation or device memory-mapped input-output operation configured for the respective container. allocate virtual memory having virtual memory addresses to a respective container of the at least one kernel isolated container; pin a subset of the virtual memory addresses to a subset of the physical memory addresses, wherein the subset of the virtual memory addresses includes at least one but fewer than all of the virtual memory addresses allocated to the respective container; and perform a direct memory access operation or device memory-mapped input-output operation of the respective container on the subset of the physical memory addresses; wherein an amount of the subset of the physical memory addresses is allocated based on the direct memory access operation or device memory-mapped input-output operation configured for the respective container. <EOS>