The section about namespaces and cgroups is very thorough, but we also need something showing how to practically limit container resource usage without diving into a very deep technical chapter.
