It's pretty much what gVisor does.

https://gvisor.dev/