[boibombeiro]

I agree.

Most articles seems to be about VMS. I want to use cgroups and namespace to manange apps I use daily and that can be easily compromised.

Things like, neovim plugins, the terminal (kitty now edits the zshrc) etc.

I am aware of sandbox tools, like firejail. But wish there was more resources on how to manange local apps.