Evaluate current state of Linux namespaces
We should evaluate if a container-based solution (e.g. LXC or unshare(1)) is now a viable, secure-enough solution for creating isolated jails.
See the blueprint for the current state of our research.
To upload designs, you'll need to enable LFS. More information