Hacker News Reader

If you're already using systemd, there's systemd-nspawn.

Take a look at rkt. It seems like it would be much closer as it does script based container execution.

Rkt is pretty much dead as a standalone technology. It was influential in a number of ways though (for example, it forced the CRI to come into existence in Kubernetes).

> I was hoping more for a toolbox like GNU fileutils, not a toolbox with a billion dollar valuation

What do you see as the primary differences between those two projects, or types of projects?

podman: https://github.com/containers/libpod

Well, there is unshare. The problem really is network devices, which require tinkering with C.

So because a tool is valuable you don't want to use it?