container-from-scratch.A small container built from scratch in Go using Linux namespaces, chroot, and cgroup v2. It isolates processes and filesystem, sets resource limits (CPU, memory, pids), and runs commands inside a minimal root filesystem, all without Docker.