While Faasd can't run in a container, this image can be imported into
ignite which runs it in a
firecracker microvm.
In this way resource usage of Faasd and all "lambdas" in it is capped
by the VM resources, and the rest of the system is sort-of-protected
by the VM sandbox.