1. Introduction
2. 1. Core Concepts
   1. 1.1. Namespaces: The Seven Kingdoms
   2. 1.2. Control Groups: Resource Management
   3. 1.3. Union Filesystems: Layers
3. 2. The Rootless Revolution
   1. 2.1. Why Rootless?
   2. 2.2. User Namespaces & ID Mapping
4. 3. Building the Container
   1. 3.1. Prerequisites & Environment
   2. 3.2. Obtaining the Image
   3. 3.3. The Filesystem Challenge
   4. 3.4. Networking User Space
5. 4. Lessons Learned
   1. 4.1. The OverlayFS Mount Trap
   2. 4.2. Process Management & Waiting
   3. 4.3. Permission Conflicts
6. Conclusion
7. License