Containers and VMs are really annoying to work with for these kinds of applications. Things like agent-safehouse and greywall are better imo