For microVM, smolvm is quite impressive.

For further isolation, I like to use nono inside a smolvm instance.