containers/bubblewrap

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

8998 stars · 392 forks observed · 2026-10-11

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Bubblewrap is a low-level unprivileged sandboxing tool for Linux that uses user namespaces to let any user run processes in isolated container-like environments. It is the sandboxing engine used by Flatpak and similar projects, though it provides primitives rather than a complete security policy.

Use cases

• run untrusted applications in a sandbox without root
• isolate a process's filesystem view on Linux
• build a custom sandboxing tool on top of user namespaces
• run containerized commands as an unprivileged user
• restrict what files a program can access during execution

When to choose

• you need unprivileged sandboxing on Linux without root or setuid
• you are building a higher-level tool like Flatpak that needs a sandbox primitive
• you want to remap or hide parts of the filesystem for a process

When to avoid

• you want a ready-made sandbox with a predefined security policy
• you need full container orchestration like Docker or Kubernetes
• you need sandboxing on non-Linux platforms

Facets

cli-tool · maturity active

security container-runtime cli security developer-tools operating-systems cli sandboxing user-namespaces flatpak unprivileged-containers isolation containers linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="containers/bubblewrap")