runc uses pivot_root in combination with a Mount Namespace and executes umount2(old_root, MNT_DETACH) to completely sever the connection to the host machine's mount tree.