Nix - Static, Permissionless, Installation-free, Pre-configured

package-manager nix nixos portable namespaces package-management proot bubblewrap bwrap permissionless

• Updated Nov 12, 2026
• Nix

Gameimage - FlatImage Game Packer

game linux portable container bubblewrap bwrap flatimage

• Updated Sep 19, 2026
• Rust

🍷 Command-line tool to run Windows apps with Wine and bwrap/bubblewrap isolation on Linux

python windows linux sandbox x11 python3 sandboxing winamp python-3 wine pulseaudio xephyr x2go bubblewrap bwrap sandbox-environment gplv3-licensing bubblewrap-wrap xnest nxagent

• Updated Nov 1, 2026
• Python

🔒🐧 Run command in a secure native sandbox (zero deps)

shell security sandbox container secure sandboxing firejail namespaces no-dependencies jail exec opsec posix-sh containerization security-tools bubblewrap bwrap sandbox-environment container-security bubblewrap-scripts

• Updated Nov 9, 2026
• Shell

Better agentic security inside a sandbox; one wrapper, any agent.

linux-namespaces bubblewrap bwrap ai-development-tools ai-terminal claude-code owasp-llm cli-agent ai-sandboxes ai-firewall terminal-agent grok-cli gpt-5-codex claude-code-agents ai-sandbox long-running-agents agentic-security agent-ide ai-agent-harness grok-build

• Updated Oct 20, 2026
• Shell

Sandbox environments backed by BubbleWrap & nix develop / nix-shell

nix nixos development-environment command-line-tool namespaces bwrap nix-shell

• Updated Oct 26, 2026
• Shell

configure DNS/proxy for one process execution on Linux 📡

linux dns cli proxy proxychains unshare bubblewrap bwrap mount-namespace per-app-dns per-process-dns

• Updated Mar 28, 2025
• Shell

Run opencode inside a bubblewrap sandbox — confine AI file access to your current working directory

sandbox opencode enhancer isolation linux-namespaces enhance bubblewrap bwrap agent-network ai-privacy filesystem-security secure-ai terminal-ai ai-assisted-coding ai-sandboxes agent-isolation agent-cli agentic-coding-tool agent-guardrails agent-ide

• Updated Oct 22, 2026
• Shell

为 Linux QQ 提供基本的存储隔离，同时集成一些其它小功能

isolation bwrap qqnt

• Updated May 4, 2026
• Rust

多文件夹 workspace：让 DSH（DeepSeek Harness）的 Agent 不只能读写主目录，还能同时读写你添加的其他文件夹。Multi-folder workspace for DeepSeek Harness: let the agent read and write several folders at once, not just the primary one.

typescript sandbox workspace folder dsh seatbelt bwrap cordis folder-management multi-root workspace-management landlock multi-folder-management-windows multi-folder deepseek-harness dsh-plugin dsh-plugins dsh-plugin-market multi-folder-workspace

• Updated Nov 11, 2026
• TypeScript

Another Linux sandbox tool (in beta). Rootless. Allows unlimited nesting if you want. Single-file python executable . No 3rd-party python lib needed.

linux sandbox container namespace firejail flatpak unshare bubblewrap bwrap podman imageless image-free

• Updated Nov 12, 2026
• Python

Run any AI agent — Claude Code, GAP, LangGraph DeepAgents — in a hermetic sandbox. Reference implementation of the Harness Protocol.

typescript sandbox gap agents harness ai-agents bwrap agent-framework anthropic langgraph claude-code agent-runtime deepagents claude-agent-sdk gitagent

• Updated Oct 19, 2026
• JavaScript

Simple desktop application sandboxing tool for GNU\Linux

linux gnu-linux sandbox desktop sandboxing linux-containers user-namespaces bubblewrap bwrap

• Updated Sep 23, 2026
• C

A tool to use Flatpak runtimes without sandbox restrictions

linux containers flatpak bwrap

• Updated Sep 5, 2026
• Rust

A bwrap+nix sandbox with cool tools like opencode, jcode for AI agents experiments

nix ai-agents bwrap

• Updated Nov 8, 2026
• Shell

Hacks helping with semi-almost-usable declarative NixOS sandboxing

nix nixos sandboxing flatpak isolation containerization bwrap nix-flake nixpak

• Updated Aug 14, 2024
• Rust

spkg is a package manager that downloads the source code from the official sources, and then compiles it specifically for your device

linux bootstrap docker cli package-manager package container chroot compiled source-code open-source-project package-manager-tool bwrap

• Updated May 31, 2025
• Rust

Command line app that lets you play games in a restricted environment by blocking access to system and network resources. It helps enhancing your privacy and security.

linux security steam privacy gaming archlinux containers sandbox telemetry steam-games proton cgroups chroot wine linux-namespaces data-protection security-tools bwrap bottles gaming-tools

• Updated Oct 4, 2026
• Rust

utilities for the project Nix Portable

bash package-manager nix containers container bash-script package-management containerization proot bubblewrap bwrap bash-scripts containerized permissionless root-free-package-manager

• Updated Apr 3, 2023
• Shell

Least-privilege filesystem sandbox & context guardrails for AI agents

bash agent fuse sandbox permission bubblewrap bwrap context-engineering

• Updated Feb 3, 2026
• Go