queer/boxxy

Health v2 · maintenance only

Adoption not part of the score

1745 stars · 32 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

boxxy is a Rust-based Linux CLI tool that uses namespaces to sandbox misbehaving applications and redirect their file reads/writes to specified paths without symlinks. It supports YAML-configured rules, context-dependent boxing, env var injection, and homedir scanning to suggest rules.

Use cases

• force the AWS CLI to store config in ~/.config/aws instead of ~/.aws
• make non-XDG-compliant apps follow XDG base directory conventions
• keep project-specific configs separate per directory
• sandbox an app so only whitelisted paths are writable
• redirect where a program writes its dotfiles without symlinks
• load .env files and inject env vars when running boxed commands

When to choose

• you're on Linux and an app insists on cluttering $HOME with dotfiles
• you need path redirection without symlinks
• you want lightweight, low-overhead per-application sandboxing
• you need context-dependent rules that change based on the working directory

When to avoid

• you're on macOS, Windows, or BSD — boxxy is Linux-only via namespaces
• you need full sandboxing with sudo or privilege escalation inside the box
• you need a hardened security boundary rather than convenience redirection
• you need a mature 1.x tool — boxxy is still 0.x.y

Facets

cli-tool · maturity maintenance

security file-system configuration-management cli developer-tools operating-systems privacy cli rust sandboxing linux-namespaces xdg-compliance path-rewriting dotfile-management command-line linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="queer/boxxy")