Containers are chroot with a Marketing Budget (via lobste.rs).

So, let’s build a container runtime using only the chroot system call. Doing so, we can learn a little about chroot, a little about container runtimes, and it will also be fun!