[soupbowl]

This is more like making an immutable linux container using only OS base tools. Docker is a whole stack doing the work for you.

[miladyincontrol]

I have to imagine systemd’s nspawn with btrfs integration took much inspiration. Combined with systemd’s service configuration it really makes a wonderful way of running distroless, immutable containers.

[arminiusreturns]

I second systemd-nspawn being a hidden gem for this usecase. I use git post-recieve hooks that target it for much of my ci/cd pipelines.

I also find myself using nspawn just to isolate apps like firefox, etc.