Understanding and Hardening Linux Containers

The whitepaper that is announced here was discussed previously: https://news.ycombinator.com/item?id=11538560