Linux containers in 500 lines of code

This looks amazing! (And amazingly detailed, with lots of references to exploits, kernel sources, and more.)

Also, while we’re talking about 500 lines of code: A practical relational query compiler in 500 lines of code, equally fascinating.