Sidesteps Docker, but the whole cgroups, namespacing and that kind of 'weird' stuff is still basically the same.