He runs a systemd-nspawnd container in a "small vm", so neither really?