A container is just a process with a few private views. I built one in thirty lines.

There is no container object in the Linux kernel. I built a working container by hand with unshare, pivot_root and a cgroup: PID 1 in its own namespaces, host filesystem gone, and a 20MB memory cap the kernel enforced with a SIGKILL.