FreeBSD has its jails technology, and it seems NetBSD might be getting something similar soon.
Jails for NetBSD aims to bring lightweight, kernel-enforced isolation to NetBSD.
[…]The system is intended to remain fully NetBSD-native. Isolation and policy enforcement are integrated into the kernel’s security framework rather than implemented in a separate runtime layer.
It does not aim to become a container platform. It does not aim to provide virtualization.
↫ Matthias Petermann
It has all the usual features you have come to expect from jails, like resource quota, security profiles, logging, and so on. Processes inside jails have no clue they’re in a jail, and using supervisor mode, jails are descendent from a single process and remain visible in the host process table. Of course, there’s many more features listed in the linked article.
It’s in development and not a default part of NetBSD at this time. The project, led by Matthias Petermann, is developed out of tree, with an unofficial NetBSD 10.1 ISO with the jails feature included available as well.
IGN Community Awards