Bubblewrap
A low-privilege container and sandbox tool for Linux, originally derived from the Flatpak project. It allows isolated namespaces to be created without root privileges, restricting the filesystem view, network access, and process capabilities. It is suited for lightweight security isolation scenarios.
Timeline (last 90 days)
Bubblewrap constrains the filesystem, network, and devices a process can see through namespaces and seccomp filters, and is often used by Flatpak as an underlying isolation layer.
Both Claude Code and Codex use Seatbelt on macOS and Bubblewrap on Linux for process isolation.
The runtime uses Seatbelt on macOS and Bubblewrap on Linux to achieve OS-level sandbox isolation.
Bubblewrap is a low-privilege container tool on Linux, originally derived from the Flatpak project, that can create isolated namespaces without root privileges.
Flatpak packages an application and all its dependencies into a standalone runtime container, implements process-level sandbox isolation via technologies such as Bubblewrap, and provides a unified distribution channel through Flathub.
Bubblewrap creates isolated environments through user namespaces, allowing operation without root privileges.
All Facts (6)
Bubblewrap constrains the filesystem, network, and devices a process can see through namespaces and seccomp filters, and is often used by Flatpak as an underlying isolation layer.
50%UnverifiedBoth Claude Code and Codex use Seatbelt on macOS and Bubblewrap on Linux for process isolation.
50%UnverifiedThe runtime uses Seatbelt on macOS and Bubblewrap on Linux to achieve OS-level sandbox isolation.
50%UnverifiedBubblewrap is a low-privilege container tool on Linux, originally derived from the Flatpak project, that can create isolated namespaces without root privileges.
50%UnverifiedFlatpak packages an application and all its dependencies into a standalone runtime container, implements process-level sandbox isolation via technologies such as Bubblewrap, and provides a unified distribution channel through Flathub.
50%UnverifiedBubblewrap creates isolated environments through user namespaces, allowing operation without root privileges.
50%