Containerization is where processes are sandboxed under Linux via
namespaces
and cgroups—or via jails under BSDs—to limit the process's access to the larger system. Common features of this are limiting filesystem access via a changed root—commonly called a
chroot
—which changes the root of the filesystem as the process sees it to a specified path, restricting the process namespace, and other such changes to restrict the process.