{"id":20261085,"url":"https://github.com/jellyterra/bwrapman","last_synced_at":"2026-01-19T16:32:25.552Z","repository":{"id":243368031,"uuid":"811963915","full_name":"jellyterra/bwrapman","owner":"jellyterra","description":"Sandbox with permission control in profile like Flatpak.","archived":false,"fork":false,"pushed_at":"2025-06-04T16:54:59.000Z","size":15,"stargazers_count":3,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-09-22T10:45:47.576Z","etag":null,"topics":["bwrap","flatpak","sandbox"],"latest_commit_sha":null,"homepage":"","language":"Rust","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/jellyterra.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2024-06-07T16:55:14.000Z","updated_at":"2025-06-04T16:54:55.000Z","dependencies_parsed_at":"2024-06-08T11:48:52.479Z","dependency_job_id":"8e35e43a-7764-48e3-8b68-2bd01b4cbcdf","html_url":"https://github.com/jellyterra/bwrapman","commit_stats":null,"previous_names":["jellyterra/bwrapman"],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/jellyterra/bwrapman","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jellyterra%2Fbwrapman","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jellyterra%2Fbwrapman/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jellyterra%2Fbwrapman/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jellyterra%2Fbwrapman/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/jellyterra","download_url":"https://codeload.github.com/jellyterra/bwrapman/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jellyterra%2Fbwrapman/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28574334,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-19T16:29:19.148Z","status":"ssl_error","status_checked_at":"2026-01-19T16:29:17.772Z","response_time":67,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["bwrap","flatpak","sandbox"],"created_at":"2024-11-14T11:23:50.372Z","updated_at":"2026-01-19T16:32:25.545Z","avatar_url":"https://github.com/jellyterra.png","language":"Rust","funding_links":[],"categories":[],"sub_categories":[],"readme":"# bwrapman\n\nBubblewrap profile launcher.\n\nAims to be an alternative to Flatpak sandbox.\n\nIt generates sandbox options for Bubblewrap, which Flatpak does as well.\n\nIf DBus is enabled in profile, it launches a process for proxying D-Bus messages.\n\n## Install\n\n### Download [binary releases](https://github.com/jellyterra/bwrapman/releases)\n\n### Build from source\n\n```shell\ncargo install bwrapman\n```\n\n## Usage\n\n```\nbwrapman (profile) (executable) [args ...]\n```\n\n```shell\nbwrapman dev.toml bash -c \"echo Okay\"\n``` \n\n### Requirement\n\n- bwrap\n- [xdg-dbus-proxy](https://github.com/flatpak/xdg-dbus-proxy)\n\n## Profile\n\n### Profile schema\n\n```rust\npub struct Config {\n    pub share_user: bool,\n    pub share_ipc: bool,\n    pub share_pid: bool,\n    pub share_net: bool,\n    pub share_uts: bool,\n    pub share_cgroup: bool,\n    pub share_dev: bool,\n    pub share_wayland: bool,\n    pub share_x11: bool,\n    pub share_env: bool,\n    pub keep_alive: bool,\n\n    pub bind: Option\u003cVec\u003cBindConfig\u003e\u003e,\n    pub dev_bind: Option\u003cVec\u003cBindConfig\u003e\u003e,\n    pub symlink: Option\u003cVec\u003c(String, String)\u003e\u003e,\n\n    pub env_pass: Option\u003cVec\u003cString\u003e\u003e,\n    pub env: Option\u003cHashMap\u003cString, String\u003e\u003e,\n    pub unset: Option\u003cVec\u003cString\u003e\u003e,\n\n    pub procfs: Option\u003cString\u003e,\n    pub tmpfs: Option\u003cVec\u003cString\u003e\u003e,\n\n    pub uid: Option\u003cu16\u003e,\n    pub gid: Option\u003cu16\u003e,\n\n    pub hostname: Option\u003cString\u003e,\n\n    pub dbus_proxy: Option\u003cDBusProxyConfig\u003e,\n}\n\npub struct BindConfig {\n    pub src: String,\n    pub dest: String,\n    pub no_fail: bool,\n    pub rw: bool,\n}\n\npub struct DBusProxyConfig {\n    pub own: Vec\u003cString\u003e,\n    pub talk: Vec\u003cString\u003e,\n}\n```\n\n### Example\n\n```toml\n# Enable internet.\nshare_net = true\n# Enable IPC.\nshare_ipc = true\n# Pass all environment variables to the sandbox.\nshare_env = true\n# Share Wayland socket.\nshare_wayland = true\n# Share X11 socket and authority file.\nshare_x11 = true\n\nprocfs = \"/proc\"\n\n# Mount tmpfs on /tmp\n# Which will override /tmp/.X11-unix but may not affect X11 connection.\ntmpfs = [\"/tmp\"]\n\n[[bind]]\nsrc = \"/sandbox\"\ndest = \"/sandbox\"\n# Read-write permission.\nrw = true\n\n[[bind]]\nsrc = \"/etc\"\ndest = \"/etc\"\n\n[[bind]]\nsrc = \"/opt\"\ndest = \"/opt\"\n\n[[bind]]\nsrc = \"/sys\"\ndest = \"/sys\"\n\n[[bind]]\nsrc = \"/usr\"\ndest = \"/usr\"\n\n[[bind]]\nsrc = \"/usr/bin\"\ndest = \"/bin\"\n\n[[bind]]\nsrc = \"/usr/lib\"\ndest = \"/lib\"\n\n[[bind]]\nsrc = \"/usr/lib64\"\ndest = \"/lib64\"\n\n[[bind]]\nsrc = \"/nix\"\ndest = \"/nix\"\n# Try binding mount or ignore on failure.\nno_fail = true\n\n[[dev_bind]]\nsrc = \"/dev\"\ndest = \"/dev\"\n\n[dbus_proxy]\nown = []\ntalk = [\"com.canonical.AppMenu.Registrar.*\"]\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fjellyterra%2Fbwrapman","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fjellyterra%2Fbwrapman","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fjellyterra%2Fbwrapman/lists"}