Singularity containers not mentioned yet: are unique, they don't change on use and can bind mount resources, run without root privileges. You can actually execute the image files and include them in the well known Unix pipe sequences in your favorite shell. Really powerful stuff.