Kata containers, gvisor? Or if you want GUI application sandboxed then I've heard of people assembling VM filesystems on the fly and booting up a VM in qemu/kvm

Kata containers, gvisor? Or if you want GUI application sandboxed then I've heard of people assembling VM filesystems on the fly and booting up a VM in qemu/kvm, but idk if that's available in a neat package.