A. Restrict the disk space a container can consume.

B. Prevent processes from performing actions which might infringe the container.

C. Enable memory deduplication to cache files which exist in multiple containers.

D. Map potentially dangerous system calls to an emulation layer provided by the container virtualization.

E. Allow regular users to start containers with elevated permissions.