I didn't want to use "jail" term because it is mostly unheard of outside of FreeBSD. Container definition is very stretched nowadays. Look at Windows HostProce

I didn't want to use "jail" term because it is mostly unheard of outside of FreeBSD. Container definition is very stretched nowadays. Look at Windows HostProcesses in Kubernetes [1]. They don't have neither process, network nor device isolation from the host. I also plan to try macOS sandbox-exec tool, which should offer additional isolation from the host. [1]: https://kubernetes.io/blog/2022/12/13/windows-host-process-containers-ga/ https://kubernetes.io/blog/2022/12/13/windows-host-process-c...