Systemd container are an easy way to create containers for isolating programs onto private networks, which I do a lot when I'm doing web development.
It's really cool - both host and container run systemd and know how to communicate, and everything just works.
This guide derrives most stuff from the arch wiki, and tries to pull it into a single set of instructions.