Sandboxing untrusted code with Bubblewrap

Sandboxing is about running code you don’t fully trust without giving it the run of your machine.