I take docker images and export them to tar and run with systemd-nspawn containers and machinectl. it's the most basic productionalized container setup without the unreliable docker stuff