executes `unshare` and `newuidmap/newgidmap` in a single command, plus slirp - View it on GitHub