Hacker News Reader

Or just use SystemD with nspawn.

You can, but it be comes quite difficult to secure and manage very quickly. Nikos talks about the SSH use case at CERN in this video [1] and mentions that they tried quite a few things before ending up with ContainerSSH.

[1] https://youtu.be/d6aCBiInMbg?t=525

Thanks for this! This explains the project better than the GitHub site

Yeah, we've gone through a few iterations with the README on GH, but it's really hard to explain the project in the length available there without going into only a very specific use case.

Reply on news.ycombinator.com