I went halfway to creating a VM for MacOS, but apparently if you sign in to anything in that state, you can get your account closed. :/

Could be great as a test/dev box though.

EDIT: Just run Portainer in an unprivileged LXC container. That's what I do. Isolation, native performance, plus a point-and click web manager for Docker containers. It's absolutely delightful!