using it instead of docker, works well so far both in highly regulated setups as well as more free roaming setups with both kind for k8s and the like