You can also use those features with systemd's seccomp sandbox, they have a ton of features such as chroot, user and group namespaces etc. It's littered with s

You can also use those features with systemd's seccomp sandbox, they have a ton of features such as chroot, user and group namespaces etc. It's littered with sandbox features but you can read your way through the man pages locally. [1] [1] well, or online: https://www.man7.org/linux/man-pages/man5/systemd.exec.5.html https://www.man7.org/linux/man-pages/man5/systemd.exec.5.htm...