So SSH in a container is bad? How about using an HTML5 browser to connect to a vncserver in a container via guacamole in the same container. And then... run everything as root!