Tree Sandbox is described as '"Tree-shaped" sandbox: multi-layer nesting and branching, like a “tree” composed of multiple sub-containers. A sandbox is composed of multiple layered sub-containers. With this design, “untrusted” procs and “semi-trusted” procs run in different layers of a sandbox;' and is an app. There are more than 10 alternatives to Tree Sandbox for a variety of platforms, including Linux, Windows, Mac, Web-based and Self-Hosted apps. The best Tree Sandbox alternative is Docker, which is both free and Open Source. Other great apps like Tree Sandbox are Sandboxie Plus, Podman, Flatpak and Docker Desktop.
rkt is the next-generation container manager for Linux clusters. Designed for security, simplicity, and composability within modern cluster architectures, rkt discovers, verifies, fetches, and executes application containers with pluggable isolation.
CRI-O is an implementation of the Kubernetes CRI (Container Runtime Interface) to enable using OCI (Open Container Initiative) compatible runtimes. It is a lightweight alternative to using Docker as the runtime for kubernetes.
Mbox is a lightweight sandboxing mechanism that any user can use without special privileges in commodity operating systems.
Sandboxing software for Windows OS WinJail is full implementation of chroot, with additional features like "copy-on-write" mechanism applied to chroot'ed files, additional registry based chroot, and more.
WinJail has templates that can be applied for all applicatio.
CLI tool for spawning and running containers according to the OCI specification.
