Zouuup/landrun
View on GitHub ↗ ★ 2,331 Go
Run any Linux process in a secure, unprivileged sandbox using Landlock. Think firejail, but lightweight, user-friendly, and baked into the kernel.
8 mentions on Hacker News by 6 people: 1 story, 7 comments · first 2025-03-22 · latest 2026-07-14
20082026
-
…at this time - although we are working on a prototype using the new landlock kernel interface ( https://github.com/Zouuup/landrun ). OSX is the best, we use the in-built (seatbelt) sandbox via sandbox-exec. For Windows, we use WSL…
comment by kirtivr · 2026-07-14 · in Show HN: FixBugs – Reproduce production bugs and verify fixes -
Isn't landrun the preferred way to sandbox apps on linux these days instead? https://github.com/Zouuup/landrun
comment by prmoustache · 2026-01-15 · in Bubblewrap: A nimble way to prevent agents from accessing your .env files -
…https://github.com/libriscv/libriscv which is a sandbox (The fastest RISC-V sandbox) There is also https://github.com/Zouuup/landrun Run any Linux process in a secure, unprivileged sandbox using Landlock. Think firejail, but lightweight,…
comment by Imustaskforhelp · 2026-01-12 · in FUSE is All You Need – Giving agents access to anything via filesystems -
https://man.freebsd.org/cgi/man.cgi?jail https://github.com/Zouuup/landrun
comment by prmoustache · 2025-12-19 · in We pwned X, Vercel, Cursor, and Discord through a supply-chain attack -
Yup. There are tools that use landlock to accomplish just that. https://github.com/Zouuup/landrun All you gotta do is apply a policy and do a fork() exec(). There is also support in firejail.
comment by razighter777 · 2025-11-29 · in Landlock-Ing Linux -
…be accessible by default. Check out https://github.com/anthropic-experimental/sandbox-runtime and https://github.com/Zouuup/landrun as examples on how you could restrict agents for example.
comment by thomas34298 · 2025-11-25 · in Google Antigravity exfiltrates data via indirect prompt injection attack -
…might pique your interest as I found it to be interesting and then using it with something like https://github.com/Zouuup/landrun There is also tinykvm and other projects too which can simply take a binary and run it and I think that maybe…
comment by Imustaskforhelp · 2025-10-02 · in Why I chose Lua for this blog