Nsjail, firecracker, gVisor, or v8 isolates are all good options with different tradeoffs