"In case that wasn’t sarcasm: you probably don’t want to run your browser in this, since it already has a sandbox and you’ll have a measurable performance penal

"In case that wasn’t sarcasm: you probably don’t want to run your browser in this, since it already has a sandbox and you’ll have a measurable performance penalty by running in a virtual machine." Actually, what I do want to do more than anything in this sphere is run browsers in a VM. The account containers in firefox is not enough. This would work without performance penalty if you could chroot jail a gui application. There's almost no overhead in a jail - it's not a full blown VM, just a different chroot. Here is the best recipe so far: https://news.ycombinator.com/item?id=14243672 https://news.ycombinator.com/item?id=14243672 ... but of course that's not a fit for OSX, which has no Xserver and blah blah quartz blah blah major spaghetti to get that working. Also OSX does not have 'jail'.