I've been working with Docker at my new job, and I realized, they're basically PND/DBP packages. Download a squashFS file, union mount, and overlay a data directory, run/restart a command. Everything is automatically sandboxed.
Docker containers can be stored anywhere, even on removable...