Modern container orchestrators like Kubernetes, Docker or LXC work like magic. We run a simple command or submit a declaration file and the system pops up the requested application - but what is happening behind the curtains? What Linux features are leveraged to create something we call a container? This is a hands on session in which we create a simple, but (hopefully) secure container. We discuss the moving parts like namespaces, capabilities and cgroups as we dodge upcoming pitfalls and challenges. Jump in and create your first container by hand!