I do something like this using systemd containers based on btrfs snapshots of my current system[1]. I have also used docker to the same end. My past experienc

I do something like this using systemd containers based on btrfs snapshots of my current system[1]. I have also used docker to the same end. My past experience with Ptrace based things like this tells me not to trust them. Too many ways to subtly break the program executing under you, too many ways for the program to accidentally get around your filters. [1] https://wiki.archlinux.org/index.php/Systemd-nspawn#Use_Btrfs_subvolume_as_container_root https://wiki.archlinux.org/index.php/Systemd-nspawn#Use_Btrf...