try
Inspect a command's effects before modifying your live system
...It works by using Linux namespaces through unshare together with overlay-based filesystem techniques so that commands can execute in an isolated view of the system rather than directly modifying the host environment immediately. This makes it useful for experimenting with package installation, system changes, and other shell commands where users want a chance to review the outcome first. The project is careful not to position itself as a full security sandbox, since trusted commands can still make network calls and the tool is presented as a prototype rather than a complete isolation boundary. It supports multiple Linux distributions and can fall back to mergerfs or unionfs in environments where overlayfs on nested mounts does not work as expected. ...