yes, separate kernels + virtualized hardware via hypervisor.

containers are built on linux primitives & so shares the kernel.

Excellent, thank you. This is definitely useful to me.