Look at what isolation tools people building cloud images use
Docker? LXC? Vagrant? See parent ticket and blueprint for context.
Blueprint: https://tails.boum.org/blueprint/replace_vagrant/
Parent Task: #7526 (closed)
Related issues
- Blocks #7580 (closed)
Original created by @intrigeri on 7529 (Redmine)