Comment by jquery_dev

That's what opam (ocaml package manager) uses for linux sandboxing