Status: OUT
RHEL 9 containers with defense-in-depth isolation (per-container MCS categories within SELinux Type Enforcement, layered with firewalld and crypto policies) run on resilient compute infrastructure (KVM/QEMU/libvirt with Pacemaker HA clustering, mandatory STONITH fencing, and Corosync membership), providing both workload isolation and infrastructure fault tolerance.