[jpgvm]

It's not a question of size but a question of semantics.

If you dump an OS in a container you are treating it like a lightweight VM (and that might be fine in some/many cases).

If however you restrict it to exactly what you need and it's runtime dependencies + absolutely nothing more then suddenly it's something else entirely - it's process isolation, better yet it's -portable- process isolation.