@ncommander nodds in agreement
Espechally since #Zones are a built-in containerization and isolation feature of #illumos nee #OpenSolaris and it would be a good match for hat exact scenario...
That being said, it reminds me why I did start my own:
Because #Viprinux's #OpenADK is an unworkable mess even cringier than the #GNUtils toolchain...
https://www.viprinet.com/en/support/downloads
https://github.com/OS-1337/OS1337

