How "full" will be the OS virtualization may rule out containers, i.e. what about things that are meant for outside containers like playing directly with device

How "full" will be the OS virtualization may rule out containers, i.e. what about things that are meant for outside containers like playing directly with devices or loading kernel modules? You can give a container privileged access, but if you don't want to affect your main system that may not be used. Maybe a thin VM environment (like qemu/kvm/xen) less expensive in resources than vbox or vmware, and you can still manage them with kimchi or virt-manager. If you don't want that much "full" access, and still want something that behaves like a full OS, and if you don't want docker's opinionated approach to containers, you can use lxc+lxd for that.