This technical white paper aims to move beyond the ‘black box’ abstraction to explore the Linux kernel primitives that ensure the isolation and security of containerised environments.