Kata Containers. A light OCI-compliant tool which can run in nested virtualization environments, though container startup time can be a little slower.