Bubblewrap: Low-Level Unprivileged Sandboxing for Linux

Repositorycontainers/bubblewrapTool

Bubblewrap is a C-based low-level tool that lets unprivileged Linux users create isolated sandboxes using kernel user namespaces.

Key points

  1. Addresses the risk of admin-focused tools like Docker and systemd-nspawn, where unprivileged access can easily escalate to host root privileges.
  2. Relies on Linux user namespaces and PR_SET_NO_NEW_PRIVS to prevent setuid privilege escalations; legacy setuid support has been removed.
  3. Acts as a foundational sandbox builder rather than a turnkey solution: security boundaries are defined entirely by the caller's command-line arguments.
  4. Powers sandboxing in projects such as Flatpak, libgnome-desktop, rpm-ostree unprivileged, and bwrap-oci.
  5. Inherits code from xdg-app helper and linux-user-chroot, representing a mature ecosystem component with over 8,600 GitHub stars.

Why it matters

Desktop environments and application runners frequently need container isolation without requiring administrative access. Bubblewrap provides the underlying plumbing to make safe non-root sandboxing possible on Linux.

Analysis

By avoiding hardcoded security policies, Bubblewrap delegates the responsibility for sandbox boundaries to the wrapping tool. This makes it a flexible primitive for framework authors like Flatpak rather than an end-user sandboxing tool.

Mentioned links

Summary generated by AI (Gemini 3.8 Flash, 27 September 2026). It may contain errors – the original source is authoritative.

Related entries

Similar in content, found by the AI search.

  • Repository:microsoft/mxc

    Microsoft eXecution Container (MXC): Sandboxed Execution for Untrusted Code

    Microsoft eXecution Container (MXC) is a cross-platform sandboxed code execution framework designed for running untrusted workloads such as AI model output, plugins, and tools across Windows, Linux, and macOS. It wraps native OS containment mechanisms and VMs into a unified policy engine and typed SDKs.

    1.8kstarsRust

    AI & LLMs· Tool

  • Repository:anthropics/sandbox-runtime

    Anthropic Sandbox Runtime: Lightweight Process Isolation Without Containers

    Anthropic's Sandbox Runtime (srt) is an open-source tool designed to enforce OS-level filesystem and network restrictions on arbitrary processes. Developed as a safety component for Claude Code, it isolates AI agents, MCP servers, and shell commands without requiring containerisation.

    5.1kstarsTypeScript

    AI & LLMs· Tool

  • X post:Simon Willison

    Microsoft MXC: Open-Source Sandboxing for AI Agents and Untrusted Code

    Simon Willison highlights Microsoft's newly open-sourced MXC (Microsoft eXecution Container). The cross-platform library enables sandboxed execution of untrusted code—such as model outputs, plugins, and tools—across Windows, Linux, and macOS.

    545bookmarks45.5kviews

    AI & LLMs· Tool

  • Article:Wikipedia-Autoren

    Linux Containers (LXC): Architecture, Security, and Ecosystem

    LXC provides operating system-level virtualisation on Linux by running multiple isolated systems on a single shared kernel. It combines kernel cgroups and namespaces to isolate processes and enforce resource limits.

    Security· Resource

  • Repository:NVIDIA/OpenShell

    NVIDIA OpenShell: Isolated Runtime for Autonomous AI Agents

    NVIDIA OpenShell is an open-source runtime written in Rust designed to run autonomous AI agents in secure sandboxes. It enforces declarative policies at the kernel level and guards access to network routes and credentials.

    16.6kstarsRust

    AI & LLMs· Tool

  • Repository:agent-substrate/substrate

    Agent Substrate: Zero-Trust Sandboxing for Autonomous Agents on Kubernetes

    Agent Substrate is an open-source Go runtime designed to run millions of agent workloads securely and efficiently on Kubernetes. It isolates untrusted code using microVMs or gVisor and snapshots idle agents to save resources.

    5.4kstarsGo

    AI & LLMs· Tool

Back to the knowledge base

Let's talk about your project

Get in touch

Locations

  • Mattersburg
    Johann Nepomuk Bergerstraße 7/2/14
    7210 Mattersburg, Austria
  • Vienna
    Ungargasse 64-66/3/404
    1030 Wien, Austria

Parts of this content were created with the assistance of AI.