Hacker GitHub

← All repos

containers/bubblewrap

View on GitHub ↗ ★ 9,336 C

Low-level unprivileged sandboxing tool used by Flatpak and similar projects

94 mentions on Hacker News by 80 people: 6 stories, 88 comments · first 2016-08-07 · latest 2026-10-10

Mentions per year 94 mentions · busiest year 2026 (24)
20082026
AllStoriesComments NewestTopOldest
  1. And Linux would like to present you bubblewrap [1][2][3][4] or the infamous SELinux. [1]: https://github.com/containers/bubblewrap#usage [2]: https://man.archlinux.org/man/bwrap.1 [3]: https://wiki.archlinux.org/title/Bubblewrap#Usage_examp…
    comment by ciupicri · 2026-10-10 · in Telegram Desktop vulnerability allowed any user's file to be stolen
  2. …ithub.com/anthropics/claude-code/security/advisorie... You probably know that since you run pi inside https://github.com/containers/bubblewrap .
    comment by bel8 · 2026-07-20 · in Annoying and alarming things about OpenCode
  3. Think they are referring to this https://github.com/containers/bubblewrap
    comment by khurs · 2026-07-12 · in What xAI's Grok build CLI sends to xAI: A wire-level analysis
  4. …parts of the filesystem. Using a different user might be enough, but I typically use [bubblewrap]( https://github.com/containers/bubblewrap ).
    comment by kennykartman · 2026-07-09 · in GPT-5.6
  5. …if your goal is light-weight, up to full Docker if you want the tooling that comes with that. [1] https://github.com/containers/bubblewrap [2] https://github.com/libkrun/libkrun
    comment by Catloafdev · 2026-07-03 · in Jamesob's guide to running SOTA LLMs locally
  6. …. I trust it...enough. It updates very frequently so as a safe guard I run it sandboxed with https://github.com/containers/bubblewrap so it can only access the project folder and some whitelisted config files
    comment by gandreani · 2026-06-24 · in GLM-5.2 is a step change for open agents
  7. …but yes 'sandboxes' and 'containers' provide much less isolation than most people realize. [0] https://github.com/containers/bubblewrap#limitations [1] https://wiki.archlinux.org/title/Bubblewrap [2] https://gitlab.com/apparmor/apparmor/-/b…
    comment by nyrikki · 2026-05-18 · in Where OpenClaw Security Is Heading
  8. …can handroll a lot with: https://github.com/nestybox/sysbox?tab=readme-ov-file https://gvisor.dev https://github.com/containers/bubblewrap?tab=readme-ov-file For hardware virtualized machines it much harder but you can do it via:…
    comment by benswerd · 2026-04-06 · in Launch HN: Freestyle – Sandboxes for Coding Agents
  9. …useful here. Have all executed commands wrapped with a BW context to prevent and constrain access. https://github.com/containers/bubblewrap
    comment by mroche · 2026-03-28 · in Go hard on agents, not on your filesystem
  10. …controlled by the Bash tool ( https://code.claude.com/docs/en/sandboxing ) and then bubblewrap ( https://github.com/containers/bubblewrap ) on linux and Seatbelt on mac at the system level
    comment by ray_v · 2026-03-28 · in Go hard on agents, not on your filesystem
  11. …based at all. OpenSUSE works via btrfs snapshots, Fedora Atomic uses rpm-ostree currently. [1]: https://github.com/containers/bubblewrap
    comment by Levitating · 2026-03-18 · in OpenSUSE Kalpa
  12. …amla sandbox, csl-core, microsandbox, workerd, wasmtime- mte containers/bubblewrap: https://github.com/containers/bubblewrap#sandboxing The bubblewrap readme mentions containers as binaries with binctr; I guess without overlayfs or other…
    comment by westurner · 2026-03-17 · in Pyodide: a Python distribution based on WebAssembly
  13. …Claude Code or your harness of choice inside bubblewrap with a shim/stub for the base binary? https://github.com/containers/bubblewrap
    comment by snthpy · 2026-03-10 · in Agent Safehouse – macOS-native sandboxing for local agents
  14. https://github.com/containers/bubblewrap
    comment by himata4113 · 2026-02-25 · in Pi – A minimal terminal coding harness
  15. …- https://github.com/amlalabs/amla-sandbox - https://github.com/eryx-org/eryx - https://github.com/containers/bubblewrap (not new) - https://github.com/coplane/localsandbox - https://github.com/sd2k/conch - https://github.com/Gerharddc/li
    comment by jpeeler · 2026-02-21 · in macOS's Little-Known Command-Line Sandboxing Tool (2025)
  16. …probably explain why userspace filtering can never solve as well bubblewrap README > Sandboxing: https://github.com/containers/bubblewrap#sandboxing arch wiki > Bubblewrap > Using portals; XDG Desktop Portal:…
    comment by westurner · 2026-02-19 · in Show HN: CSL-Core – Formally Verified Neuro-Symbolic Safety Engine for AI
  17. …seems to be (on top of containerization and selinux) writing a tight seccomp filter. Gleaned from https://github.com/containers/bubblewrap/blob/0c408e156b12dd... and https://github.com/containers/bubblewrap/tree/0c408e156b12dd...
    comment by its-summertime · 2026-02-07 · in Monty: A minimal, secure Python interpreter written in Rust for use by AI
  18. …supports overlayfs mounts [1]. Seems like you should be able to replicate that flow with it. [1] https://github.com/containers/bubblewrap/issues/412
    comment by eikenberry · 2026-02-04 · in Sandboxing AI Agents in Linux
  19. …Bubblewrap and sandbox-run. It's an anything-is-already-way-better-than-nothing type of thing. [0]: https://github.com/containers/bubblewrap [1]: https://github.com/sandbox-utils/sandbox-run
    comment by kernc · 2026-02-03 · in Show HN: I Built a Sandbox for Agents
  20. …but that could still be a lot. > You never give any actual reference, only I have to. Here you go: https://github.com/containers/bubblewrap . This source doesn't support your claim. > This is not a robust system designed for security…
    comment by JCattheATM · 2026-01-16 · in Chromium Has Merged JpegXL
  21. …referring to misconfigurations You never give any actual reference, only I have to. Here you go: https://github.com/containers/bubblewrap . > bubblewrap is not a complete, ready-made sandbox with a specific security policy. > As a result,…
    comment by fsflover · 2026-01-16 · in Chromium Has Merged JpegXL
  22. https://github.com/containers/bubblewrap/issues/142
    comment by eyberg · 2026-01-15 · in Bubblewrap: A nimble way to prevent agents from accessing your .env files
  23. The link you need is https://github.com/containers/bubblewrap Don't leave prod secrets in your dev env.
    comment by OutOfHere · 2026-01-15 · in Bubblewrap: A nimble way to prevent agents from accessing your .env files
  24. …a kernel 0day. For anyone who wants to understand what a container is I would recommend bubblewrap: https://github.com/containers/bubblewrap This is also what flatpak happens to use. It should not take long to realize that you can set it…
    comment by coppsilgold · 2026-01-06 · in Sandboxing Untrusted Python
  25. …fine under "bwrap". I am excited to see more Landlock tools emerge that make this task easier. - https://github.com/containers/bubblewrap - https://codeberg.org/dannyfritz/dotfiles/src/commit/38343008... -…
    comment by dannyfritz07 · 2025-11-30 · in Landlock-Ing Linux
  26. …dinking around with all its arguments, but it beats dealing with rootless Podman containers. [1] https://github.com/containers/bubblewrap
    comment by artisin · 2025-11-24 · in Shai Hulud launches second supply-chain attack
  27. Bubblewrap is a really interesting project, really worth checking out. https://github.com/containers/bubblewrap It's the base for Flatpack, the thing that makes Flatpack be sandboxed. I use it to run Claude Code / Codex / Gemini CLI, to…
    comment by qwertox · 2025-11-09 · in Using bubblewrap to add sandboxing to NetBSD
  28. …firejail In case anyone else is curious, I found the following comparison in bubblewrap's repo. - https://github.com/containers/bubblewrap#related-project-com... I'm gonna try both and see which one I like. Thanks for this info! You're…
    comment by lioeters · 2025-09-20 · in Less is safer: Reducing the risk of supply chain attacks
  29. …The syscall filtering for them is extremely weak. Flatpak (which sandboxes via bubblewrap: https://github.com/containers/bubblewrap ) can be configured to be reasonably good, but we still encourage the use of VMs if needed. We provide…
    comment by secureblue · 2025-08-27 · in Malicious versions of Nx and some supporting plugins were published
  30. …use bwrap so it's not exposed at all. [0] https://blog.gpkb.org/posts/calibre-rootless-install/ [1] https://github.com/containers/bubblewrap
    comment by globular-toast · 2025-07-25 · in Vet is a safety net for the curl | bash pattern
  31. …with it and it gives you control over exactly what permissions you want in the namespace. [1]: https://github.com/containers/bubblewrap
    comment by 418tpot · 2025-03-15 · in Tj-actions/changed-files GitHub Action Compromised – used by over 23K repos
  32. …/dev/random \ --unshare-net \ --unshare-ipc \ --cap-drop ALL \ --chdir "$cwd" \ "$@" [3] https://github.com/containers/bubblewrap
    comment by mivirl · 2025-03-15 · in Tj-actions/changed-files GitHub Action Compromised – used by over 23K repos
  33. Another thing to look at is bubblewrap ( https://github.com/containers/bubblewrap ), which is what implements the sandboxing in Flatpak. It's handy if you want to run a command from your host in a particular sandbox as kind of a one-off,…
    comment by dylan-m · 2025-02-27 · in How to run GUI applications directly in containers
  34. As a bubblewrap user, beware https://github.com/containers/bubblewrap/pull/586 still missing. The usual ^C doesn't work with your sandboxed stuff, very annoying. A cursory look at NSjail tells me its filesystem stuff is less granular than…
    comment by a-french-anon · 2025-02-05 · in NsJail: A light-weight process isolation tool for Linux
  35. …choice. [1]: https://wiki.nixos.org/wiki/Nix_Installation_Guide , linking to the official one [2]: https://github.com/containers/bubblewrap [3]: https://wiki.nixos.org/wiki/Nix_Installation_Guide#nix-user-...
    comment by kokada · 2024-11-28 · in PRoot: User-space implementation of chroot, mount –bind, and binfmt_misc
  36. …[1] < https://github.com/containers/skopeo > [2] < https://git.jakstys.lt/motiejus/undocker > [3] < https://github.com/containers/bubblewrap >
    comment by coppsilgold · 2024-11-15 · in Bootstrapping Alpine Linux without root
  37. …of any sandboxing tech that does anything but limit syscalls and filesystem access. After rereading https://github.com/containers/bubblewrap?tab=readme-ov-file#... a bit, I suppose there's a case for being able to change what a sandboxed…
    comment by yjftsjthsd-h · 2024-11-04 · in HardenedBSD Feature Comparison with OpenBSD, FreeBSD, NetBSD
  38. …layout and work at all, so it wouldn't be unreasonable to add more isolation. [0] apparently using https://github.com/containers/bubblewrap which can also do things like PID and network isolation.
    comment by ndriscoll · 2024-10-31 · in Why anti-cheat software utilizes kernel drivers (2020)
  39. …I wouldn't recommend relying on devs or maintainers to do application isolation work for you. [1] < https://github.com/containers/bubblewrap > [2] < https://git.sr.ht/~whynothugo/way-secure >
    comment by coppsilgold · 2024-05-10 · in KeePassXC Debian maintainer has removed all network features
  40. Nothing nix specific but you may be interested in https://github.com/containers/bubblewrap
    comment by n8henrie · 2024-02-27 · in I Use Nix on macOS
  41. https://github.com/containers/bubblewrap allows specifying volumes for scripts too
    comment by nopurpose · 2024-02-03 · in A lesson in dockerizing shell scripts
  42. …) exec bwrap "${FLAGS[@]}" --seccomp 10 10< /path/a_filter.bpf -- /usr/bin/gui_app "$@" [1] < https://github.com/containers/bubblewrap >
    comment by coppsilgold · 2024-01-13 · in Exploring Podman: A More Secure Docker Alternative
  43. …what's the difference between nsjail[1] and bubblewrap[2]? [1] https://github.com/google/nsjail [2] https://github.com/containers/bubblewrap
    comment by bdahz · 2023-10-24 · in Server-side sandboxing: Containers and seccomp
  44. …$ SafeRun ~/Untrusted/RandomExecutable ``` This is basically manually invoking what Flatpak does: https://github.com/containers/bubblewrap This is also useful for more than just security. E.G., you can test how your app would behave on a…
    comment by Intralexical · 2023-09-09 · in A study of malicious code in PyPI ecosystem
  45. While trying to find out more comparison information, found this light on details issue: https://github.com/containers/bubblewrap/issues/81 It mentions nsjail and minijail.
    comment by jpeeler · 2023-07-11 · in Firejail: Light, featureful and zero-dependency security sandbox for Linux
  46. …make it relatively easy to test regardless. Bubblewrap is used internally by Flatpak and others. https://github.com/containers/bubblewrap
    comment by jchw · 2023-07-11 · in Firejail: Light, featureful and zero-dependency security sandbox for Linux
  47. …containers if needed, depending on a policy you set. If you want something even smaller, take https://github.com/containers/bubblewrap or https://github.com/arachsys/containers and run them under the process monitor of your choice, like…
    comment by nine_k · 2023-06-19 · in Keycloak – Open-source identity and access management interview
  48. …around bubblewrap [0]. I'm not sure what you mean with integrating it with a CMake build. [0]: https://github.com/containers/bubblewrap
    comment by Laaas · 2023-06-03 · in Red Hat dropping support for LibreOffice
  49. Bubblewrap is a good tool in this space https://github.com/containers/bubblewrap
    comment by klooney · 2023-03-23 · in The Unix process API is unreliable and unsafe (2021)
  50. …[2] http://eradman.com/entrproject/ [3] https://watchexec.github.io/ [4] https://github.com/containers/bubblewrap
    comment by jamesdutc · 2023-03-22 · in The Unix process API is unreliable and unsafe (2021)