firecracker would be nice if it weren't an aws tool focused solely on performance in their particular environment.

support for qemu (non kvm) would allow to use it as a safety sandbox on random processes like qubes but lighter.