Isolate containers with a user namespace Linux namespaces provide isolation for running processes, limiting their access to system resources without the running process being aware of the limitations. For more information on Linux namespaces, see Linux namespaces. The best way to prevent privilege-escalation attacks from within a container is to configure your container's applications to run as un