yosh

Doesn't this still lack packaging? The value of docker is not in the runtime (which is terrible) but in the packaging. Also, port remap?

Tar is quite reasonable tbh - if you wanna get fancy you could also distribute rabin-chunked deltas. Docker's is ok but not that great

Also looks like port forwarding is built in; systemd-nspawn -p <from>:<to>

I found this informative: https://coreos.com/rkt/docs/latest/rkt-vs-other-projects.html#rkt-vs-systemd-nspawn … - rkt for packaging and signing, nspawn under the hood = winning.