Docker and its tightly coupled sibling programs amount to millions of lines of code. It took billions of dollars in funding to make. There's a reason it's classified as a PaaS.

It is far more than a "layer on top of cgroups".

If you believe "Dockerfiles are basically shell scripts", you could try using shell scripts.