I feel like many of the general chroot principles in this article can be applied to containers.