code: func RunInResourceContainer(containerName string) error {
  	manager := fs.Manager{
  		Cgroups: &configs.Cgroup{
  			Name:            containerName,
  			AllowAllDevices: true,
  		},
  	}
  
  	return manager.Apply(os.Getpid())
  }
docs: // Creates resource-only containerName if it does not already exist and moves
  // the current process to it.
  //
  // containerName must be an absolute container name.