6/4/2026 - finding a container escape in my own sandboxing solution29/3/2026 - securing nixos with sandboxing