Harbormaster: Policy Enforcement for Containers
Container-based operating system virtualization: a scalable, high-performance alternative to hypervisors