Take a look at the Nestybox blog site: https://blog.nestybox.com/

It has an article on Docker sandboxing. Hope that helps!