If you want to completely disable the networking stack on a container, you can use the --network none flag when starting the container. Within the container, only the loopback device is created. Here's an example-
$ docker run --rm -dit \
--network none \
--name no-net-alpine \
alpine:latest \
ash
When you execute some common networking commands and check the containers network stack, you will find there's no network created.