Translations:Manual:$wgShellRestrictionMethod/6/en

Use firejail ($1), a Linux sandboxing system.