System containers as Docker sandboxes (2019) | Hacker News Reader