https://github.com/containers/bubblewrap/issues/81
It mentions nsjail and minijail.
Reply on news.ycombinator.com