There's been a writeup on this topic by the Fly team -- https://fly.io/blog/docker-without-docker/