sandbox the cli util included with macOS allows you to conure basically anything

Then, using docker/orbstack, I’ve created an easy chroot shell on steroids. It mounts the current dir to a container. Great for development or sandboxing

https://github.com/jrz/container-shell