Mount Namespace Virtualization

Configure independent mount tables to hide the host root filesystem from the containerized process.