https://www.toptal.com/linux/separation-anxiety-isolating-your-system-with-linux-namespaces
https://www.linuxjournal.com/content/everything-you-need-know-about-linux-containers-part-ii-working-linux-containers-lxc
https://lwn.net/Articles/531114/
https://lwn.net/Articles/604609/
https://coolshell.cn/articles/17010.html