Understanding virtualization containers