The Linux 3.8 merge window saw the acceptance of Eric Biederman's
sizeable series of user namespace and related
patches.  Although there remain some details to finish—for
example, a number of Linux filesystems are not yet user-namespace
aware—the implementation of user namespaces is now functionally
complete.

It's been a while since last we looked at Linux namespaces.  Our
series has been missing a piece that we are finally filling
in: network namespaces.  As the name would imply, network namespaces
partition the use of the network—devices, addresses, ports, routes,
firewall rules,
etc.—into
separate boxes, essentially virtualizing the network within a single
running kernel instance.  Network namespaces entered the kernel in 2.6.24,
almost exactly five years ago; it took something approaching a year before
they were ready for prime time.  Since then, they seem to have been largely
ignored by many developers.

LXC Это обертка, docker Это уже инфораструктура  иначе бы им бы никто не пользовался