omegajail The omegaUp sandbox. Uses minijail to create a userspace container with seccomp-bpf syscall filtering in which the untrusted code is run.