I just posted a draft patch for a proof-of-concept that I got working early this week
for running the tests in a Docker container rather on the test system itself:
Considering the ease of running the "restraint" test harness, I have used
of "beah", Beaker's default test harness.
From a user's perspective, the only change needed is specifying
"contained_harness" as a ksmeta
It's draft, so comments/suggestions/questions very welcome.