Safe by Default: Building a Minimal, Rootless Sandbox on Linux
medium.com
People often reach for Docker, Podman or even a virtual machine when they need isolation. But what if you don’t need to ship a whole…