A sandboxing file system emulator You can think of ForkFS as a lightweight container: programs still have access to your real system (and can therefore jump out of the sandbox), but their disk changes are re-routed to special directories without changing the real file system. Under the hood, ForkFS is implemented as a wrapper around OverlayFS. Warning: we make no security claims. Do NOT use this tool with potentially malicious software. PS: you might also be interested in Firejail: . Usage: forkfs Commands: run Run commands inside the sandbox sessions Manage sessions help Print this message or the help of the given subcommand(s) Options: -h, --help Print help (use `-h` for a summary) -V, --version Print version --- Run commands inside the sandbox Usage: forkfs run [OPTIONS] ... Arguments: ... The command to run in isolation Options: -s, --session The fork/sandbox to use If it does not exist or is inactive, it will be created and activated. [default: default] -h, --help Print help (use `-h` for a summary) --- Manage sessions Each session has its own separate view of the file system that is persistent. That is, individual command invocations build upon each other. Actives sessions are those that are mounted, while inactive sessions remember the changes that were made within them, but are not ready to be used. Note: weird things may happen if the real file system changes after establishing a session. You may want to delete all sessions to restore clean behavior in such cases. Usage: forkfs sessions Commands: list List sessions stop Unmount active sessions delete Delete sessions help Print this message or the help of the given subcommand(s) Options: -h, --help Print help (use `-h` for a summary) --- List sessions `[active]` sessions are denoted with brackets while `inactive` sessions are bare. Usage: forkfs sessions list Options: -h, --help Print help (use `-h` for a summary) --- Unmount active sessions Usage: forkfs sessions stop [OPTIONS] ... Arguments: ... The session(s) to operate on Options: -a, --all Operate on all sessions -h, --help Print help (use `-h` for a summary) --- Delete sessions Usage: forkfs sessions delete [OPTIONS] ... Arguments: ... The session(s) to operate on Options: -a, --all Operate on all sessions -h, --help Print help (use `-h` for a summary) --- Print this message or the help of the given subcommand(s) Usage: forkfs sessions help [COMMAND] Commands: list List sessions stop Unmount active sessions delete Delete sessions help Print this message or the help of the given subcommand(s) --- List sessions Usage: forkfs sessions help list --- Unmount active sessions Usage: forkfs sessions help stop --- Delete sessions Usage: forkfs sessions help delete --- Print this message or the help of the given subcommand(s) Usage: forkfs sessions help help --- Print this message or the help of the given subcommand(s) Usage: forkfs help [COMMAND] Commands: run Run commands inside the sandbox sessions Manage sessions help Print this message or the help of the given subcommand(s) --- Run commands inside the sandbox Usage: forkfs help run --- Manage sessions Usage: forkfs help sessions [COMMAND] Commands: list List sessions stop Unmount active sessions delete Delete sessions --- List sessions Usage: forkfs help sessions list --- Unmount active sessions Usage: forkfs help sessions stop --- Delete sessions Usage: forkfs help sessions delete --- Print this message or the help of the given subcommand(s) Usage: forkfs help help