Assertion: container | /r/CapableOf | run on its own kernel
Facets:
Source sentences:
text: As a result, each container runs on its own kernel eliminating security limitations of the traditional runC runtime.