Limiting what a container can consume

• A

  Control groups, which are a separate mechanism for accounting and limiting resources

• B

  The namespaces themselves, which are what bound the set of things a process can reach

• C

  The scheduler, which shares the CPU equally between containers

• D

  Nothing, since resource limits require a virtual machine