The unshare tool [1] can be used along with ip-tools to create a namespace with networking support. Add a chroot or pivot root to it and you have a Linux container. It&#x27;s quite easy to do. We have a guide on using namespaces directly and the various projects using it including Firejail here [2]<p>Linux namespaces were created to support containers. This is how userland container projects like LXC, Docker and Nspawn work, only they don&#x27;t use the unshare tool but the underlying system calls clonens, setns and unshare [3].<p>[1] <a href="http:&#x2F;&#x2F;man7.org&#x2F;linux&#x2F;man-pages&#x2F;man2&#x2F;unshare.2.html" rel="nofollow">http:&#x2F;&#x2F;man7.org&#x2F;linux&#x2F;man-pages&#x2F;man2&#x2F;unshare.2.html</a><p>[2] <a href="https:&#x2F;&#x2F;www.flockport.com&#x2F;alternatives-to-docker-and-lxc&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.flockport.com&#x2F;alternatives-to-docker-and-lxc&#x2F;</a><p>[3] <a href="https:&#x2F;&#x2F;lwn.net&#x2F;Articles&#x2F;531114&#x2F;" rel="nofollow">https:&#x2F;&#x2F;lwn.net&#x2F;Articles&#x2F;531114&#x2F;</a>