You almost certainly don't need to setup linux namespaces, cgroups and everything else from scratch for every new container you wish to create. The Device that does it for you personally is known as the "container runtime" - the lower, even the lowest level utility of every containe