A command-line tool that runs GUI applications and full desktops inside Docker or Podman containers, with extra X security hardening and sandboxing.