Question: what are cgroups and namespaces?
Answer: cgroups, which stands for control groups, are a kernel mechanism for limiting and measuring the total resources used by a group of processes running on a system. ... Namespaces are a kernel mechanism for limiting the visibility that a group of processes has of the rest of a system.