[JeremyNT]

Incus is great for this use case, I did something similar. I volume mount specific stuff into the guests and let OpenCode loose with all tools enabled.

I used OpenCode to vibe code the shell script I use to manage it.

I actually use VMs rather than LXC, which makes it easier to run e.g. docker.

[indigodaddy]

Very cool. I think docker also runs fine inside of LXC, but haven't experimented too much with that specifically yet.

[JeremyNT]

I might go back and give it a try! It would certainly save some ram.

I immediately reached for VMs because I just didn't want any question about the full level of isolation, but the cool thing about incus is that it should be easy to switch between them.