[foresto]

LXC is another option. Less automated than LXD, but doesn't require a privileged daemon, and allows any user to create unprivileged containers.