On the subject of VMs, have you looked at the Sysbox container runtime? It's intends to bridge the gap between containers and VMs, allowing containers to run VM-like workloads with proper isolation. Thus you can leverage all the container tools to manage them.