github.com/alcortesm/isolate (go): Runs commands in Linux containers with configurable levels of isolation.
Keywords: containers|linux-containers|namespace|user-namespaces