There are yet thousands of these so-called "sandbox" projects that exists. This one sounds rather really wasteful on resources?

Bubblewrap would just be a better alternative for this.

right chain of tought, but systemd is the only to truly leverage linux namespaces capabilities, allowing private networks, other rootfs, etc

	▲	yjftsjthsd-h 8 hours ago \| parent [-]
		systemd is not the only thing using linux namespaces. For example, the suggested bubblewrap uses namespaces to allow isolated networks (--unshare-net) and changing rootfs (--bind /mnt/foo /)

kakugawa 10 hours ago | parent | prev | next [-]

bwrap has a lot of sharp edges that can bite you, if you're not aware of them.

bubblewrap is linux only and offers a fraction of isolation of a microvm