A simple yet powerful tool to turn traditional container/OS images into unprivileged sandboxes. - View it on GitHub