A form of virtualization where applications run in isolated user spaces called containers, all using the same shared operating system.