How containers isolate processes using linux namespaces. Namespaces along with cgroups impements your containers and implement the restrictions.