A whirlwind tour of systemd-nspawn containers (2025)