bubblewrap

Tech stack & purpose

Bubblewrap is a low-level sandboxing tool for Linux that allows unprivileged users to create isolated container environments using the kernel's user namespaces feature. Rather than providing a complete, ready-made sandbox with a fixed security policy, it serves as a flexible foundation that larger frameworks like Flatpak can build upon to define their own security models and sandbox configurations. The tool is built using meson for compilation and leverages Linux kernel features including user namespaces, IPC namespaces, PID namespaces, network namespaces, UTS namespaces, and seccomp filters to restrict access to the operating system and user data.

Community & reference links

• traditional way
• Seccomp

Languages

Contributors (top 30 of 71)

• Simon McVittie242 commits
• Alexander Larsson167 commits
• Colin Walters98 commits
• Giuseppe Scrivano19 commits
• Matthias Clasen13 commits
• Mrunal Patel10 commits
• Christian Göttsche10 commits
• Antonio Ospite7 commits
• Jonathan Wright6 commits
• Philip Withnall6 commits
• Sebastian Pipping6 commits
• Marcos Paulo de Souza5 commits
• 
  a13460545 commits · 0 followers
• 
  Tom Smeding4 commits · 57 followers
• Vasya Novikov4 commits
• Dan Walsh4 commits
• rusty-snake4 commits
• Harald Kubota4 commits
• Richard Maw3 commits
• Jonathan Lebon3 commits
• Timothy E Baldwin3 commits
• Chad Versace3 commits
• Christian Kellner3 commits
• TomSweeneyRedHat2 commits
• valoq2 commits
• Hugo Osvaldo Barrera2 commits
• Aidan Hobson Sayers2 commits
• Martin Krajnak2 commits
• Joel Pelaez Jorge2 commits
• Sebastian Wick2 commits