I ended up realizing that QEMU already supports microVMs and shipped https://github.com/rcarmo/pve-microvm yesterday. It's working out great for me, even if it's not portable in the same way (I can always do a .qcow dump, I guess)