使用此模式的实现不仅与容器或框架API的细节隔离，而且还与端点配置隔离。

Implementations that use this pattern are not only insulated from the specifics of container or framework APIs, but they are also insulated from endpoint configuration.

youdao

不同之处在于只读绑定挂载和使用名称空间增强chroot环境的隔离性，使之成为有效的容器。

The difference lies in the read-only bind mounts and the use of namespaces to enhance the isolation of the chroot environment to the point that it becomes an effective container.

youdao

通过在一部智能电话上采用一个嵌入式虚拟机监控程序，单个设备可以通过在单独的容器(VMs)中隔离两个使用模型同时用于安全的公司用途和个人用途。

By employing an embedded hypervisor on a smart phone, the single device can be for secure corporate use and for personal use by segregating the two use models in separate containers (VMs).

youdao