Add bubblewrap and / or nsjail as an alternative to firejail
bubblewrap
Debian packages bubblewrap and there is a LGPL wrapper script in this repo which could be copied and adapted.
Or perhaps bubblejail could be used.
nsjail
Edited by Chris Croome