bubblewrap
A low-level unprivileged sandboxing tool for Linux that creates container environments without requiring root privileges.
What is bubblewrap?
Bubblewrap is a low-level sandboxing tool for Linux that allows unprivileged users to create isolated container environments without requiring root privileges. It provides a subset of user namespace functionality through a setuid binary, focusing on security and minimalism while enabling frameworks like Flatpak to build higher-level sandboxing solutions.
Developers and system integrators building containerized applications or sandboxing frameworks on Linux, particularly those needing unprivileged operation on distributions without full user namespace support.
Bubblewrap offers a minimal, auditable sandboxing foundation that's safer than full user namespaces for unprivileged use, with no path whitelisting vulnerabilities and proven integration in production systems like Flatpak.
Overview
Low-level unprivileged sandboxing tool used by Flatpak and similar projects
Use Cases
Best For
- Creating secure sandboxes for desktop applications without root access
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
