Wow, I hope one day Linux will be able to support the exclusive MacOs/Windows technology of Docker Sandboxes.
(it's in the doc, but kinda strange to not see some instructions on the main page, probably distro related)
There's always https://github.com/mensfeld/code-on-incus
[dead]
What about bubblewrap? It also provides a sandbox