LXD is awesome. Let package managers handle updates, automatic security updates, high performance compared to docker/kubernetes and the opportunity to run the same thing outside a container if that's needed.