Namespaces

• Namespace is a way to isolate a process so that it doesn't know about the other processes running "outside"
• It's a way to "sandbox" a process
• Use the command unshare to run a process in a new namespace