Here's your cool, lightweight and easily configurable sandbox - https://github.com/google/nsjail