oci-room

Experimentation ground for playing around with OCI containers. Contains a very minimal implementation of a container runtime that isolates kernel resources using namespaces. User namespaces included.