CGroups are under constant development, partly because they form the core of
many commercial services these days. An amazing thing about this is that they
remain an unfinished project. Isolating and apportioning system elements is an
ongoing effort, with many pieces still to do. And because of security concerns,
it never may be possible to present a virtual system as a fully
independent system. There always may be compromises that have to be made.