there is also nspawn, which requires very little additional installation and no services running except the container launcher itself

https://github.com/relaytools/relay-tools-images I built the most part of this one, for spawning strfry relays inside these nspawn LXC containers, it is a part of systemd