Container Internals: Building a Container from Scratch

how to build a container from scratch using only namespaces, cgroups, and filesystem primitives — no Docker, just Linux