And a system container makes an OS (or OS userland) believe that that it has the kernel to itself.