Docker has an interesting approach lately with their sandboxes which are firewalled, proxied, and file system restricted microVMs (you can bind mount outside) with a docker daemon inside of it.