Solaris from 10 onwards to OpenIndiana/illumos/SmartOS/OmniOS has some of this.

I don't know if you could remove the root user, but you can have a lot of control using pfexec. This might require you to design and assemble it however.

ZFS of course for ZFS filesystem.

Solaris Containers are great: sensible and easy-to-use containerized/jailing capabilities

Solaris has "projects" and the FSS (Fair Share Scheduler) which should allow you to cap in both absolute and relative terms (like a share of CPU time or RAM) on a per-user or per-project/group basis, even if not in a container.

As well, you can create virtualized network interfaces called VNICs and have bandwidth management by VNIC or by port (e.g. port 443, port 25). So you could always reserve say 10% of bandwidth for SSH traffic so you never get starved, etc.