also keep in mind, that gitpod meddled heavily with the underlying container runtime, replacing its device-cgroup-policies and such. If you're fine with going this path, sysbox might be an option for you, although their future seems a bit unclear to me.