Seccomp and landlock based application sandbox with support for namespaces (gitlab.exherbo.org)

I haven’t tried this but based on the description seems pretty rad. I stumbled across Exherbo [1] Linux as well while looking.

[1] https://www.exherbolinux.org/