Containers

Containers share the host's kernel and are separated by features of that kernel rather than by a hardware boundary.

That is what makes them light and fast, and it is why the isolation is weaker than a virtual machine's. It is usually good enough, and where the workloads belong to mutually untrusted parties it may not be. Knowing which assumption you are relying on is the point.