Another project that aims to deliver this is Linuxkit (https://github.com/linuxkit/linuxkit https://github.com/linuxkit/linuxkit). All the components they ship

Another project that aims to deliver this is Linuxkit (https://github.com/linuxkit/linuxkit https://github.com/linuxkit/linuxkit). All the components they ship are written in memory safe languages (usually Go) and run as containers under containerd. You can build a custom image very easily, fully defined as a YAML file.