Building containers without privileged mode