@sirVery good. Down with Docker! 馃榿
You might consider Firejail, as plain chroot is quite weak in terms of isolation.
