I thought why is qemu used here? Why not use linux native namespaces and cgroups.
Permissions. Isolation.
Permissions. Isolation.