At FOSDEM, Daniel Berrange presented libvirt-sandbox, which sandboxes programs in a VM or a container without first requiring the user to set up an operating system there