Deploying docker containers declaratively

[samrose]

I am thinking of exploring systemd-nspawn - ArchWiki with Nixos Containers

https://nixos.org/nixos/manual/index.html#ch-containers

NixOS container limitations

The consensus seems to be that containers in general do not add any extra security. Be it Docker/lxc/nspawn. Do not use containers to add security. Use VMs