You almost certainly don't need to setup linux namespaces, cgroups and all the things else from scratch for every new container you wish to produce. The Resource that will it to suit your needs is called the "container runtime" - the small, even the lowest stage utility of every contai