A container runtime that runs workloads in lightweight virtual machines, combining the feel of containers with VM-level isolation and security.