• User namespace requirements
• Unprivileged bubblewrap
• Setuid bubblewrap
• Changing from setuid to unprivileged