Portable, high-performance containers for HPC