Comment Comment by heretoo Another options is "nsjail". I landed on it having considered at firejail, apparmour, selinux, bubblewrap. parent heretoo 4 years ago