[Rufbdbskrufb473]

I could be wrong, but I believe they were using a modified chroot with some preload libraries to intercept missing kernel calls.

[kortriephfhe]

IIRC it was `proot`, it's not a preload, but ptrace based.

preload based unprivileged chroot exists (libfakechroot), but doesn't work for static linked binaries.