Linux Container基盤技術。cgroup v2 Unified Hierarchy (CPU/Memory/IO/PIDs/Cpuset/Hugetlb/Misc)・cgroup v1 (Maintenance)・Namespace: PID/MNT/NET/IPC/UTS/USER/Cgroup・unshare・nsenter・systemd-nspawn (Container)・runc (Container Runtime)・LXC/LXD・rootless container (User Namespace)・seccomp (Syscall Filter)・AppArmor・SELinux・Capabilities (CAP_*)・Linux Capability Lists・¥0 OSS、2026年cgroup v2 Universal主流化。