| Cloud Foundry | cgroups (via Warden) | [source] |
| Docker | LXC, cgroups | [source] |
| Heroku | LXC | [source] |
| OpenShift | SELinux/MCS, cgroups | [source] |
| Stackato | LXC, AppArmor | [source] |
(The above table doesn’t capture all the details of isolation, but should at least tell the rough design.)
Interesting read: Are LXC containers enough?