In those cases, freedombox and yunohost are very useful IMO, but still very lightweight and bare metal.
Discussion
there is also nspawn, which requires very little additional installation and no services running except the container launcher itself
https://github.com/relaytools/relay-tools-images I built the most part of this one, for spawning strfry relays inside these nspawn LXC containers, it is a part of systemd