I think you can already build Docker images via Docker within travis CI, because they somehow provide you (semi?-)privileged access to the required Linux cgroup and namespace features.

If you are running within a regular Docker container commands such as

     sysctl -w kernel.unprivileged_userns_clone=1

are not possible, due to /sys being read-only.

Am I doing something wrong?