i havent tried it, but i believe ive heard of it, i went with systemd-nspawn because it seems the most stable, provides cgroup access to full system resources and does not require additional virtual network.