Container
Isolation is not a property a Linux container has. It is a list of specific things you asked the kernel to hide, one flag at a time.
-
-
Containers, Images, and Their Boundaries
Deleting a file in a later image layer does not remove it. The removal is recorded as an entry; the bytes are still in the layer below.
-
Containers: Images, Isolation, and Limits
A container is a process with a filesystem from an image, restricted views from namespaces, and limits from cgroups. This post explains each part and how to check it.