Hacker News Reader

"I could have run the process with cgroup and namespace isolation"... using systemd.

Or skip the million non-container related dependencies introduced by systemd and focus on a container centric init system...