You can just use sysbox on this single node and set the container runtime for sysadmins workspaces to this runtime.