That’s not even to mention declarative, rootless, podman containers via systemd or quadlet!

NixOS Containers can also be a good option if you don’t care about rootless.