Nix - Static, Permissionless, Installation-free, Pre-configured
🍷 Command-line tool to run Windows apps with Wine and bwrap/bubblewrap isolation on Linux
🔒🐧 Run command in a secure native sandbox (zero deps)
Sandbox environments backed by BubbleWrap & nix develop / nix-shell
configure DNS/proxy for one process execution on Linux 📡
Run any AI agent — Claude Code, GAP, LangGraph DeepAgents — in a hermetic sandbox. Reference implementation of the Harness Protocol.
Simple desktop application sandboxing tool for GNU\Linux
A tool to use Flatpak runtimes without sandbox restrictions
Hacks helping with semi-almost-usable declarative NixOS sandboxing
Run opencode inside a bubblewrap sandbox — confine AI file access to your current working directory
spkg is a package manager that downloads the source code from the official sources, and then compiles it specifically for your device
Command line app that lets you play games in a restricted environment by blocking access to system and network resources. It helps enhancing your privacy and security.
Run AI coding agents (Claude Code, opencode, Grok, ...) inside a bubblewrap sandbox — one wrapper, any agent.
utilities for the project Nix Portable
Least-privilege filesystem sandbox & context guardrails for AI agents
To associate your repository with the bwrap topic, visit your repo's landing page and select "manage topics."