Is there a reason you're not using a chrooted build environment? Though in fairness that's one of those things I think to do AFTER breaking everything too. Bonus points if you use a loopback filesystem and thus can just keep a clean system copied as a file in case you need to blow away whatever you just broke.
Docker works too but I find docker more convoluted than I care for in most cases.