I highly dislike how docker is structured, LXC itself is a somewhat mess of enterprisism and slathering on more abstractions on top of it makes it even more so.

I highly dislike how docker is structured, LXC itself is a somewhat mess of enterprisism and slathering on more abstractions on top of it makes it even more so. Look at http://criu.org http://criu.org for a more modular approach (a sandboxing interface would still be needed) and IMHO what is needed is a sane library to abstract sandboxing (not libvirt) and another for resource limiting (which includes hardware)