Bubblewrap github.com ↗

An unprivileged Linux sandboxing tool built on namespaces.

ToolSecurity & privacylinuxnamespacessandboxingsandboxlinux-namespacesisolation

Captured 6 Nov 2026

Recommended in 2 threads

Claude Code's "Don't Ask Again" exposes passwords in 1,122 public GitHub files
apiiro.com · 6 days ago
Used to run Claude Code with read-only mounts without Docker overhead.
Devvm.dev: One VM for every project
devvm.dev · 7 days ago
Proposed as a lighter alternative to full VMs, though others noted it is Linux-only and has sharp edges.

simplewall ↗Security & privacy
A minimal open-source Windows Filtering Platform firewall.
1 thread
amazing-sandbox ↗Security & privacy
An ephemeral container sandbox for running coding tools with access limited to the working directory.
1 thread
LUKS ↗Security & privacy
The Linux Unified Key Setup standard for disk encryption.
0 threads
sandbox-runtime ↗Security & privacy
Anthropic's lightweight sandbox for restricting filesystem and network access of processes.
2 threads
AWS-LC ↗Security & privacy
AWS's general-purpose cryptographic library derived from BoringSSL.
1 thread
kvm-sandbox ↗Security & privacy
A libvirt and cloud-init based VM sandbox focused on network containment.
0 threads
AppArmor ↗Security & privacy
A Linux kernel security module that confines programs with per-application profiles.
1 thread
gVisor Security & privacy
An application kernel that provides a sandboxed container runtime.
2 threads

1Password ↗
A commercial password manager with a built-in SSH agent that can be unlocked with Touch ID.
8 threads
YubiKey ↗
A hardware security key supporting FIDO2, PIV and OpenPGP.
5 threads
NoScript ↗
A browser extension that blocks JavaScript and other active content by default.
4 threads
Secretive ↗
A macOS app that stores SSH keys in the Secure Enclave and acts as an SSH agent.
3 threads
Signal
An end-to-end encrypted messaging app.
3 threads
Tor
An anonymity network that routes traffic through volunteer relays.
3 threads
Canarytokens ↗
Free service for planting tripwire tokens that alert you when they are accessed.
2 threads
Cloudflare Turnstile ↗
A CAPTCHA alternative from Cloudflare that checks whether a visitor is human.
2 threads
Cloudflare WAF ↗
Cloudflare's managed web application firewall.
2 threads
Convergence ↗
Moxie Marlinspike's 2011 proposal for client-chosen notary-based TLS certificate verification.
2 threads
Darknet Diaries ↗
A podcast covering true stories from the dark side of the internet, including hacking and cyber heists.
2 threads
Ente Photos
An end-to-end encrypted photo storage service.
2 threads

Link from a commenter, not checked or endorsed by us: ↗ https://github.com/containers/bubblewrap