nostr:npub1ktvleg4d765hrvqh7sx3fm6z5lxwgl8ef58fvt530nlcz2jea4hqg4fv3a containers are light weight and still reside on your own kernel, at least on linux. On windows they can be quite inefficient since there is no native kernel, but thats another matter. On linux they arent anymore resource intensive than an isolated chroot directly.

Id say bare metal is overkill because now you have a system you need to perpetually maintain and keep upt o date and constantly battle with dependency rot, something docker addresses quite nicely.