NIXOS-CONTAINERS ARE NOT FINISHED. SOME WORK HAS BEEN DONE ON THE RFC, BUT THEY ARE NOT RELIABLE AT THIS TIME.
modify the container service to apply resource controls to the service that manages the container's lifecycle.
containers.<name> = { ... };
systemd.services."container@<name>.service".serviceConfig.CPUQuota = "125%";