Jails for NetBSD provides container-like isolation and cgroup-style resource control, backed by kernel enforcement and minimal tooling for creation, supervision, and fleet management.