containers/bubblewrap

Bubblewrap is a low-level sandbox tool based on the Linux user namespace, designed for unprivileged users. It provides a secure containerized environment for projects such as Flatpak by isolating file system, network and resource permissions to prevent privilege escalation attacks and is suitable for building lightweight application sandboxes.