1. A system, comprising: one or more Central Processing Units (CPUs) configured to execute one or more applications on a host with a host operating system; and one or more memory storage locations operatively connected to said one or more CPUs, the one or more memory storage locations configured to store isolated environments that contain said one or more applications, wherein the isolated environments comprise at least: one or more interception layers configured to intercept access to system resources and interfaces for the one or more applications, one or more maps of resources as the one or more applications request said resources and that corresponds to private resources inside the isolated environment, one or more barrier synchronization barriers, and a checkpointing library for each of the one or more applications configured to capture a runtime state of the one or more applications; wherein the one or more applications are isolated from other applications and said host operating system when run in the isolated environment by the interception layer that intercepts calls made by the applications and redirects said calls to said private resources inside the isolated environment, and a live migration of the one or more isolated applications is performed by said checkpointing library that performs a checkpoint-restore operation.