Another container technology which can also run on SBCs is Linux Containers (LXC/LXD). Each LXC Container appears to have its own network stack. And therefore is much more flexible than Docker.
We'll run a virtual router (OpenWrt) with IPv4 and IPv6 firewall, with several web servers behind the VR. Showing that you can run containers, and have excellent security at the same time.