Your comment relates more, I think, to the general Docker project than subuser specifically.<p>The answer to your question is that it all depends on your definition of &quot;easier&quot;.<p>docker&#x2F;docker hub hide a lot of complexity in linux namespacing&#x2F;cgroups&#x2F;seccomp filtering. You can absolutely achieve the same goal with native linux tools, as long as you have the time and inclination to learn those tools.