Secure Docker out of Docker (DooD) with Nestybox System Containers? (2019) (blog.nestybox.com)

A Nestybox system container is an enhanced Docker container, designed to package not just applications but also low-level system software.