Explanation
Control Groups (cgroups) are a Linux kernel feature that allow you to limit, modify, or allocate resources as needed1. Docker uses cgroups to isolate the resources used by containers, such as CPU, memory, disk I/O, network, etc2. This means that each container can have its own set of resource limits and constraints, and that the containers cannot interfere with each other or with the host system2. This improves the security, performance, and reliability of the containers and the system as a whole. References:
* Lab: Control Groups (cgroups) | dockerlabs
* Docker run reference | Docker Docs