Low-level unprivileged sandboxing tool used by Flatpak and similar projects
OTHER License
Run glibc binaries in musl libc Void Linux environment
An insecure container runtime implementation
Learning how Process Containers work