How to implement a Docker-style container engine from scratch, in 500LOC: https://blog.lizzie.io/linux-containers-in-500-loc.html
It's not actually 'Docker', strictly speaking, but I thought this might be of interest to some of you anyway :-). There's a lot in here about how the low-level internals that power Docker work up close, especially on the capabilities side, it's pretty cool.