sandbox-run

sandbox-run is a utility designed to execute commands in a secure operating system sandbox, leveraging Linux namespaces via the `unshare` command to create isolated environments for running untrusted applications safely. Its primary use case is protecting users from the risks associated with executing third-party software by providing a lightweight alternative to established sandboxing tools like Bubblewrap and Firejail, all implemented in around 400 lines of POSIX shell code. Notable features include minimal dependencies, simple installation, and support for separate network namespaces, enhancing security during execution.