seccomp and landlock based application sandbox with support for namespaces
https://sydbox.exherbolinux.org