I use systemd-nspawn as a built-in alternative to LXC/LXD.