Docker libcontainer unifies Linux container powers

Libcontainer enables containers to work with Linux namespaces, control groups, capabilities, AppArmor security profiles, network interfaces and firewalling rules in a consistent and predictable way. It doesn’t rely on Linux userspace components such as LXC, libvirt, or systemd-nspawn Docker claims “This drastically reduces the number of moving parts, and insulates Docker from the side-effects introduced across versions and distributions of LXC.”