Ah, wonderful — a mix of full VMs, micro-VMs and system containers through LXD — how did I miss what OpenNebula is doing so far?

(System containers used by LXD provide better isolation compared to docker containers more widely used)