When a container is run, Docker creates a set of isolated workspaces for the container called namespaces.
Intermediate Docker Interview Questions