bubblewrap (spack): Unprivileged sandboxing tool 
Keywords: linux-containers|user-namespaces