Docker image

The model you already know.

OpenComputer sandbox

A full VM you keep around.
Boot & teardown — one issue per sandbox