What infrastructure or resources do Docker containers allow you to create and isolate?

Docker containers allow creating and isolating infrastructure at the operating system level using the following resources:

• Namespaces — isolate processes, network, filesystem, user IDs, and other system resources so that containers do not interfere with each other.
• Control Groups (cgroups) — limit and control the resource usage (CPU, memory, disk, network) of each container.
• Union filesystems (e.g., OverlayFS) — enable the creation of lightweight filesystem layers for containers.

Thus, Docker provides process and resource isolation, allowing multiple containers to run on a single host without conflicts and with resource consumption control.