You can combine hypervisors, user space kernels and linux namespaces all into one solution. The attacker will have to escape all of them.