Cgroups (control groups) and namespaces are two Linux kernel features that are used to manage and isolate resources and processes.
Cgroups allow administrators to limit and distribute resources among different groups of processes. They do this by grouping processes together and then applying resource limits to those groups. This can be used to ensure that no one process or group of processes consumes too many resources, which can lead to performance problems or even system instability.
Namespaces create isolated environments for processes, separating them from the host system and other processes. This can be used to protect processes from each other and to prevent them from interfering with each other's resources.