nsroot: Minimal Process Isolation Tool Implemented With Linux Namespaces (2016)

How does nsroot compare with chroot, CGROUPS, and Docker?