[neutered_knot]

It isn't clear to me how this differs from iocage, other than it expects to run on the loopback interface instead of the public one.