Bubblewrap is a low-privilege container tool on Linux, originally derived from the Flatpak project, that can create isolated namespaces without root privileges.