Yup. I implemented the rootless containers support in runc and I love working with the LXC folks when it comes to topics related to low-level container implemen

Yup. I implemented the rootless containers support in runc and I love working with the LXC folks when it comes to topics related to low-level container implementation. It should be noted though that by default LXC does require some privileged (suid) helpers (for networking and cgroups) -- though you can disable them as well. runc by default doesn't, though that's just a matter of defaults and what use-cases we were targeting.