This library provides a way to launch commands in a sandbox using bwrap on Linux.
bwrap
The simplest way to install it is to use opam:
opam install bwrap