Docker inside systemd-nspawn container

systemd-nspawn --system-call-filter='@keyring bpf' --network-bridge=br0 -b -D /path/to/container

{
  "storage-driver": "btrfs"
}

systemd-nspawn --system-call-filter='@keyring bpf' --bind=/dev/fuse --network-bridge=br0 -b -D /path/to/container

pacman -S fuse-overlayfs

{
  "storage-driver": "fuse-overlayfs"
}