Docker. It’s a bit incomplete (regarding available packages) but you can do some really effective stuff like making your command run as nobody or even turning off the internet completely, but just for that co—

—…ooooh. OOOOOH. Package manager. Please forgive my ignorance. Um…paru takes the crown for me, and nala if for some reason someone is pointing a gun towards my bun forcing me to use Ubloatu.