Does it allow access to GPUs and all system resources? That is unfortunately a limitation a lot of these sandboxes often have and you need to run a container or vm to get that.
Looks interesting. How does this compare to a container?
It uses Linux kernel namespaces instead of chroot (containers are just fancy Liunx chroot)
Ackually, “containers” on linux are usually implemented using linux namespaces instead of chroot.