Physical disentanglement in a container-based file system
Jails: Confining the omnipotent root