Overview of what is a container, the problem of software isolation it solves and how does it compares to other solutions.

Creation of the project, the logging system, the error handlings, and arguments validation

Getting the configuration, creating the skeletton for the container, checking the Linux kernel version for compatibility

Prepare inter-process communication (IPC), create a clone of the parent process while restricting its scope using namespaces.

Set the container hostname, modify the container mount point, pivoting the root.

Set up user namespaces, map the UID / GID, restrict the child process with linux capabilities

How to restrict the binary running inside our container in order to protect our system. Introduction to seccomp, syscalls, cgroups, rlimit

Execute a binary inside our container, resolve issues of dynamic libraries, mount directories inside the environment. Conclusion of the serie