You might be interested in smolvm microvms from https://smolmachines.com - which (unlike Docker) provide kernel-level isolation (among other benefits). No affiliation, just a happy user.