Create an unprivileged Linux container (LXC) dedicated to running Wordpress websites.
If you install Wordpress regularly on Linux you can instead simply clone this container.
The Wordpress installation is nothing fancy. It's not multi-site, it's not SSL enabled by default, or anything like that. Just a plain bog-standard Wordpress installation serving a single domain.