Using incus heavily on Omarchy here and love it. I created a script to read yaml configs and create ephemeral incus containers with certain capabilities and certain directories mounted within. It's a wonderful experience for sandboxing Claude Code.

Interesting idea. How short lived are the containers?

As short-lived as I want them. Recreating them is one command and about 10 seconds (I have scripted apt/gem/etc installs as a part of the recreation).

I tend to use them for a bit, and then destroy/rebuild. Think days, not weeks.