I don't get it, if you're running on linux then just use Landlock LSM inside a VM.