Hacker News Reader

Take a look at rkt in that case: https://github.com/coreos/rkt

Yes, if you don't look at rkt's for its minimal approach, then at least look at it for its ability to run containers without requiring a root service that runs all your containers under one process.

They have. It's called runc. (Or, if you want a slightly higher level wrapper API to manage your containers, containerd)

Take a look at containerd: https://github.com/docker/containerd

Since it's just one binary, what difference would this make in day-to-day operations?

Just use libvirt (virsh utility command) if that's all you want.

Oh gosh, no. Whatever faults Docker may have, they're outweighed by its very approachable UI compared to the discombobulation that is libvirt's interface.

https://libvirt.org/drvlxc.html

You're joking. They want less than a Docker container so you're recommending they use a VM? What?

Apart from thousands and thousands of successful companies =)

github.com/docker/containerd