Honestly for what I do in my work and daily life, the container technology I end up using most is a tarball and systemd-nspawn/machinectl. It does most of the stuff I need (configuring the network, binding paths in, setting limits, whatever) with less fuss than the more ‘image’ oriented ones.