The standard Firecracker setup uses a jailer that the Firecracker project provides. This generally isn't something you need to go out of your way to do.