Check out https://github.com/subspacecloud/subspace

The wireguard kernel implementation can't but AFAIK you should be able to run a userspace implementation like the rust version just fine.

Yes, though you need to pass Docker's `--privileged` and `--cap-add=all` args to enable the loading of the kernel module.

I added a section with some more resources on containerization:

https://github.com/pirate/wireguard-docs#containerization