everyone loving these linux sandboxes, even Apple wrote one https://github.com/apple/containerization/tree/main/examples...