Could you perhaps replace the VMs with bubblewrap instead?