Ask HN: Process isolation alternative do Docker

The feature I care most about Docker is the ability to run / install software with good confidence that it won't alter the behavior my installed system in any unpredictable way (give you trust Docker install / uninstall)

I'd like to explore alternatives, as the performances issues with Docker give little hope it'll resolve any time soon.

Let's set aside full os virtualization, it seem that macOS sandbox could do job, at least for fs tempering.

To give an idea of thing i've considered, running a shell in a sandbox could do the job, sandbox-exec should allow that, with the flexibility of possibility of several configuration, but it's deprecated, and creating a profile file from scratch looks intimidating.

Looks like bsd-like jails could also be an option.

I am looking for solutions or ideas that would provide mainly fs isolation, but any lightweight containerization would do.