This isn't docker, it's containerd and once deployed this is mostly read-only. You can also mount a USB hard drive of NVMe over USB if you want.

Personally, I netboot my RPis, and faasd works equally well on the public cloud.