Comment by firesteelrain

It’s all one lightweight VM. Containers share the VM’s kernel.