I feel like this article misses the bigger point that OCI containers are essentially a description of a process tree and misc. dependencies realized from a template "image". All the implementation details don't matter in the slightest. At this point there are more container runtimes that use virtualization than don't.

The crowd that is like "containers are just a Linux process using namespacing features" are only half right because that's just one (albeit the most popular) way of turning the description of the process into an actual running process.

The spec is actually super readable: https://github.com/opencontainers/runtime-spec/blob/master/s...