We use the hell out of systemd sandboxing for just running _everything_. Why fire up an extraordinary docker container when you can just create a container on t

We use the hell out of systemd sandboxing for just running _everything_. Why fire up an extraordinary docker container when you can just create a container on the fly?