Bubblewrap – Low-level unprivileged sandboxing tool used by Flatpak

• bubblewrap

  75 3,641 6.6 C

  Low-level unprivileged sandboxing tool used by Flatpak and similar projects

  

• bubblejail

  7 208 7.7 Python

  Bubblewrap based sandboxing for desktop applications

Also of interest is https://github.com/igo95862/bubblejail , a less low level program on top of bubblewrap.

• InfluxDB

  www.influxdata.com sponsored

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• firejail

  139 5,442 9.7 C

  Linux namespaces and seccomp-bpf sandbox

Wonderful little tool, too bad you must chain various exec calling tools to get cgroups (a bit akin to `ionice ... nice ... cmd`) and Linux users namespaces can't allow UNIX sockets while preventing network access (I think?).

Migrated from Firejail when its complexity annoyed me too much and I hit https://github.com/netblue30/firejail/issues/3001 (Firejail doesn't like parens or brackets in --put/--get parameters) to a badly NIH version using bwrap and bash to have "profiles":

Suggest a related project