containers / bubblewrap

Low-level unprivileged sandboxing tool used by Flatpak and similar projects