Comment by watermelon0

I would assume Clear Containers[1] are more lightweight solution, and they also leverage KVM/Qemu for isolation purposes.

[1] https://github.com/clearcontainers/runtime