https://wiki.archlinux.org.cn/title/Bubblewrap

https://github.com/containers/bubblewrap GitHub - containers/bubblewrap: Low-level unprivileged sandboxing tool used by Flatpak and similar projects