[nitrogen]

Containerization could offer close to the same level of isolation as VMs without the insane memory bloat. Plus, VMs might be able to share common memory pages if it becomes necessary.