for bkp, i use debootstrap + chroot, but have in the past used docker and perhaps some use systemd-nspawn (for exploit tasks) would sections on these be desirable?