It has to be VM at the moment, because that's just how things work currently. But with some effort it could be made to work with containers, at least for the "easy" linux platforms.