qemu-user-static (qus) and containers, non-invasive minimal working setups
Rust implementation of PRoot, a ptrace-based sandbox