@alxhu@greifswald.lgbt nixos-containers (i.e. backed by systemd-nspawn) because declarative, reproducible