CmdID / Commands
bwrap
Run programs in a lightweight sandbox. tldr-pages
On Linux
Run a program in a read-only environment
Give the environment access to devices, process information, and create a tmpfs for it
bwrap --dev-bind /dev /dev --proc /proc --ro-bind / / --tmpfs /tmp /bin/bashIdentify