A container runtime built using Linux namespaces, cgroups, and pivot_root.