Bubblewrap
A low-privilege container and sandbox tool for Linux, originally derived from the Flatpak project. It allows isolated namespaces to be created without root privileges, restricting the filesystem view, network access, and process capabilities. It is suited for lightweight security isolation scenarios.
Timeline (last 90 days)
Anthropic has open-sourced sandbox-runtime (srt), the OS-level sandbox behind Claude Code, used to constrain an agent's file and network access without requiring a container.
Flatpak's sandbox model is built on Bubblewrap, isolating filesystem, network and device access through namespaces, with permissions declared via finish-args in the application manifest and additional authorizations requested through the portal mechanism.
Bubblewrap constrains the filesystem, network, and devices a process can see through namespaces and seccomp filters, and is often used by Flatpak as an underlying isolation layer.
Both Claude Code and Codex use Seatbelt on macOS and Bubblewrap on Linux for process isolation.
Bubblewrap is a low-privilege container tool on Linux, originally derived from the Flatpak project, that can create isolated namespaces without root privileges.
The runtime uses Seatbelt on macOS and Bubblewrap on Linux to achieve OS-level sandbox isolation.
Flatpak packages an application and all its dependencies into a standalone runtime container, implements process-level sandbox isolation via technologies such as Bubblewrap, and provides a unified distribution channel through Flathub.
Bubblewrap creates isolated environments through user namespaces, allowing operation without root privileges.
All Facts (8)
Flatpak's sandbox model is built on Bubblewrap, isolating filesystem, network and device access through namespaces, with permissions declared via finish-args in the application manifest and additional authorizations requested through the portal mechanism.
50%UnverifiedBubblewrap constrains the filesystem, network, and devices a process can see through namespaces and seccomp filters, and is often used by Flatpak as an underlying isolation layer.
50%UnverifiedBoth Claude Code and Codex use Seatbelt on macOS and Bubblewrap on Linux for process isolation.
50%UnverifiedThe runtime uses Seatbelt on macOS and Bubblewrap on Linux to achieve OS-level sandbox isolation.
50%UnverifiedBubblewrap is a low-privilege container tool on Linux, originally derived from the Flatpak project, that can create isolated namespaces without root privileges.
50%UnverifiedFlatpak packages an application and all its dependencies into a standalone runtime container, implements process-level sandbox isolation via technologies such as Bubblewrap, and provides a unified distribution channel through Flathub.
50%UnverifiedBubblewrap creates isolated environments through user namespaces, allowing operation without root privileges.
50%UnverifiedAnthropic has open-sourced sandbox-runtime (srt), the OS-level sandbox behind Claude Code, used to constrain an agent's file and network access without requiring a container.
50%