cgroups

Isolation is not a property a container has. It is a list of specific things you asked the kernel to hide, one flag at a time.