Docker has introduced sandboxes for this purpose.