Thanks for your interest! The container runtime is software that uses the linux kernel feature cgroup/pivot_root/namespace to provide a space for processes to run in isolation from the host. There is a specification called OCI Runtime that describes it in more detail.