bubblewrap VS privacytools.io

Nothing nix specific but you may be interested in https://github.com/containers/bubblewrap

Recently, I came across Chainguard and wrote the article How to build Docker Images with Melange and Apko. As a fervent supporter of Kubernetes and GitLab CI, I was eager to experiment with building images using Melange in this particular setup. GitLab's shared Runners work seamlessly with Bubblewrap, eliminating the need for additional configurations. This post is intended for enthusiasts like myself, interested in hosting their own Kubernetes Runners and leveraging the Kubernetes Runner Type of Melange.

```

This is basically manually invoking what Flatpak does:

https://github.com/containers/bubblewrap

This is also useful for more than just security. E.G., you can test how your app would behave on a fresh install by masking your user configuration files. I personally also have a tool that uses it to basically bundle all dependencies from an entire Linux distribution in order to make highly portable AppImages— Been meaning to post that, will get around to it eventually maybe.

The flags above should hide your user data (`--tmpfs`), disable network access (`--unshare-all`), hide/virtualize devices and OS state (`--dev` and `--proc`), and make the rest of the root filesystem read-only (`--ro-bind`­— Including the insecure X11 socket in `/tmp`, which you might want to expose for GUI apps).

Check them against `bwrap --help`; I might have omitted one or two more things you'd need.

While trying to find out more comparison information, found this light on details issue:

https://github.com/containers/bubblewrap/issues/81

It mentions nsjail and minijail.

FYI, Privacy Guides is a shitshow. It was formerly privacytools.io[1], and in 2019, the creator[2] of privacytools.io stopped contributing[3] and a new contributor[4] immediately focused on donations[5], became the admin[6] and took control[7] of most assets, including donations but excluding the domain and Twitter account[8]. In 2021, the creator of privacytools.io launched a new privacytools.io[9] and added affiliate links[10], and the Privacy Guides team shut down r/privacytoolsIO rather than return it[11] to the creator. Like I said, a shitshow.

[1] https://github.com/privacytools/privacytools.io

[2] https://www.reddit.com/user/BurungHantu

[3] https://github.com/privacytools/privacytools.io/commits?auth...

[4] https://github.com/jonaharagon

[5] https://github.com/privacytools/privacytools.io/commits?afte...

[6] https://github.com/privacytools/privacytools.io/commit/4b60a...

[7] https://redd.it/tuo7mm

[8] https://twitter.com/privacytoolsIO

[9] https://redd.it/pxtw2y

[10] https://www.reddit.com/r/VPNTorrents/comments/raftz6/i_made_...

[11] https://redd.it/qk7vn0

Yes, we know you're still mad we won't add Threema. It was thoroughly discussed in our old organization.

en 2019: Signal has copious privacy issues making it unfit for privacytools.io endorsement.

Signal is just another walled garden and has a lot of other problems too: https://github.com/privacytools/privacytools.io/issues/779

Or the fork which is much more active these days https://docs.searxng.org/

In the past it Lukol served Google Ads: https://github.com/privacytools/privacytools.io/issues/1557#...

Never heard of it. Fastmail apparently never made it on to the privacytools.io list for its geographical location. See here for some other recommendations. There are also malifence and posteo. I use posteo and mailbox.org. The main two weird things about posteo is that there is no spam folder (detected spam is rejected with no option to change this), and you can't use a custom domain (because they don't want to have any information on you/your name). Mailbox.org can optionally reject spam and lets you use your custom domain. I like it a lot so far.

The correct link is https://github.com/privacytools/privacytools.io/pull/657

Worth noting the "admins" of that site wrote the content for it, check for yourself https://github.com/privacytools/privacytools.io/commits/master BurungHantu hadn't written anything really since 2016.