infrastructure

Throw away Docker for an afternoon and assemble a container by hand — btrfs snapshots, network namespaces, NAT, cgroups, and chroot — to see that a container is just an ordinary Linux process that’s been lied to about the world.