container rules