Note that the "fork/exec" style is also not an entirely bad way to do this, at least initially. In fact, our container build support for a similar scenario ultimately bottoms out on

docker

CLI invocations.