what Solaris and now illumos zones do[1]

[1] https://www.usenix.org/legacy/event/lisa04/tech/full_papers/...