A hands-on deep dive into how containers actually work — building one from scratch using Linux namespaces, cgroups, and Go.