[do not merge] introduce oo-container-network

could use Fileutils.cp instead of making system calls.