Boot a real Linux kernel as an in-process library (LKL) and route intercepted syscalls to it via seccomp - View it on GitHub