yes, separate kernels + virtualized hardware via hypervisor.

containers are built on linux primitives & so shares the kernel.