Minimal OS and logical isolation of Containers

Minimal OS: The container image includes just enough file system and libraries to run an application (but not its own kernel). The File System is bin -- essential user level libraries sbin -- system