experiments in linux sandbox stuff