I don't understand the point of avoiding running docker in a GNU/Linux chroot, given that it has no downside that you don't already have due to running containers and would vastly simply the setup.

Also, the kernel xtaguid patch looks probably wrong, since it's removing code that is probably there for a reason, and it looks like the correct fix might be to add some other condition.