docker clone

container runtime implementation focused on Linux process and filesystem isolation.

golang, ubuntu linux

Built and manually tested a container runtime in Go that isolates workloads using Linux PID, UTS, and mount namespaces, debugged isolation behavior through forked child processes and custom SysProcAttr clone flags, and verified filesystem boundaries with chroot plus proc/tmpfs mounts. Added cleanup routines to prevent orphaned mounts after test runs.