{"slug": "firejail", "name": "Firejail", "category": "security", "category_name": "Security and passwords", "description": "", "recommenders": 2, "commenters": 3, "warners": 1, "score": 0.308, "rising": 2.0, "first": "2026-08-10", "latest": "2026-10-31", "why": "If you want to sandbox your programs highly recommend looking at firejail.", "why_is_quote": true, "has_verdict": false, "sentiment": {"recommend": 2, "neutral": 1, "compare": 0, "warn": 0}, "spark": [0, 0, 0, 0, 0, 0, 0, 0, 0, 2, 0, 0], "listed": false, "loved": [], "caveat": "", "short_quote": "If you want to sandbox your programs highly recommend looking at firejail.", "icon": false, "domain": null, "github_repo": null, "official_url": "", "pricing": "", "aliases": ["Firejail", "firejail"], "verdict": null, "praise": [{"label": "", "summary": "", "quotes": [{"id": 791632306, "item_id": 49477019, "url": "https://news.ycombinator.com/item?id=49477019", "by": "EffrafaxOfWug", "date": "2026-08-28", "stance": "recommend", "quote": "If you want to sandbox your programs highly recommend looking at firejail.", "excerpt": "I avoid flatpaks and snaps as much as I can. Here is a little blog post from 2021 that lists some of the huge issues flatpaks have https://ludocode.com/blog/flatpak-is-not-the-future If you want to sandbox your programs highly recommend looking at firejail.", "context": "", "use_case": "sandboxing programs", "switched_from": "", "story": "Sovereign Tech Agency invests \u20ac500k in Flatpak"}, {"id": 787849521, "item_id": 49240595, "url": "https://news.ycombinator.com/item?id=49240595", "by": "matheusmoreira", "date": "2026-08-10", "stance": "recommend", "quote": "I took care to firejail Claude Code on my host since day one", "excerpt": "I too skip all permissions, but I run the harnesses inside an isolated virtual machine. I took care to firejail Claude Code on my host since day one, and coding my own QEMU VM orchestration solution was among the first things I used it for. Alarm fatigue will quickly destroy any and all \"meticulously approve every little command the AI wants to run\" workflows. Give it a virtual machine and let it cook. If it blows up", "context": "", "use_case": "sandboxing agents", "switched_from": "", "story": "Auto mode is now the default in Claude Code"}]}], "caveats": [{"label": "", "summary": "", "quotes": [{"id": 788935362, "item_id": 49308460, "url": "https://news.ycombinator.com/item?id=49308460", "by": "matheusmoreira", "date": "2026-08-15", "stance": "warn", "quote": "Sandboxes like firejail and bubblewrap share a kernel: attacker is one exploit away from root.", "excerpt": "QEMU virtual machines. Sandboxes like firejail and bubblewrap share a kernel: attacker is one exploit away from root. Hypervisors present an infinitely smaller attack surface, and if they're ever defeated the entire industry is done, not just me. I have a base system image that gets forked off into delta qcow2 images for every project I'm working on or whatever ephemeral execution context I need. I started a side pro", "context": "", "use_case": "sandboxing", "switched_from": "", "story": "Firefox is now the last major browser that still supports uBlock Origin"}]}], "who": [], "tags": [], "use_cases": ["sandboxing applications", "sandboxing programs", "sandboxing", "sandboxing agents"], "compared": [{"slug": "bubblewrap", "name": "bubblewrap", "co": 2, "switched_from": 0, "switched_to": 1}, {"slug": "qemu", "name": "QEMU", "co": 2, "switched_from": 0, "switched_to": 1}, {"slug": "flatpak", "name": "Flatpak", "co": 3, "switched_from": 0, "switched_to": 0}], "makers": [], "threads": [{"url": "https://news.ycombinator.com/item?id=50316531", "title": "Malware uses LLMs to rank victims by how much they're worth", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=49474786", "title": "Sovereign Tech Agency invests \u20ac500k in Flatpak", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=49303202", "title": "Firefox is now the last major browser that still supports uBlock Origin", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=49239021", "title": "Auto mode is now the default in Claude Code", "mentions": 1}], "sentiment_by_month": {"2025-11": {}, "2025-12": {}, "2026-01": {}, "2026-02": {}, "2026-03": {}, "2026-04": {}, "2026-05": {}, "2026-06": {}, "2026-07": {}, "2026-08": {"recommend": 2}, "2026-09": {}, "2026-10": {"neutral": 1}}, "quotes": [{"id": 805100497, "item_id": 50318781, "url": "https://news.ycombinator.com/item?id=50318781", "by": "tetraodonpuffer", "date": "2026-10-31", "stance": "neutral", "quote": "as well as firejail etc.", "excerpt": "this is what I do, and it's fairly cheap nowadays if you just buy 2nd hand, I actually go so far as having virtualbox VMs for some of those within the same computer (say I have my \"important accounts\" computer that has some virtualbox VMs with each a browser with only some of those). Gaming is a windows PC that has only games (so who cares) and a ps5 (so I can rent games at the library for free), development is a lin", "context": "", "use_case": "sandboxing applications", "switched_from": "", "story": "Malware uses LLMs to rank victims by how much they're worth"}, {"id": 791632306, "item_id": 49477019, "url": "https://news.ycombinator.com/item?id=49477019", "by": "EffrafaxOfWug", "date": "2026-08-28", "stance": "recommend", "quote": "If you want to sandbox your programs highly recommend looking at firejail.", "excerpt": "I avoid flatpaks and snaps as much as I can. Here is a little blog post from 2021 that lists some of the huge issues flatpaks have https://ludocode.com/blog/flatpak-is-not-the-future If you want to sandbox your programs highly recommend looking at firejail.", "context": "", "use_case": "sandboxing programs", "switched_from": "", "story": "Sovereign Tech Agency invests \u20ac500k in Flatpak"}, {"id": 788935362, "item_id": 49308460, "url": "https://news.ycombinator.com/item?id=49308460", "by": "matheusmoreira", "date": "2026-08-15", "stance": "warn", "quote": "Sandboxes like firejail and bubblewrap share a kernel: attacker is one exploit away from root.", "excerpt": "QEMU virtual machines. Sandboxes like firejail and bubblewrap share a kernel: attacker is one exploit away from root. Hypervisors present an infinitely smaller attack surface, and if they're ever defeated the entire industry is done, not just me. I have a base system image that gets forked off into delta qcow2 images for every project I'm working on or whatever ephemeral execution context I need. I started a side pro", "context": "", "use_case": "sandboxing", "switched_from": "", "story": "Firefox is now the last major browser that still supports uBlock Origin"}, {"id": 787849521, "item_id": 49240595, "url": "https://news.ycombinator.com/item?id=49240595", "by": "matheusmoreira", "date": "2026-08-10", "stance": "recommend", "quote": "I took care to firejail Claude Code on my host since day one", "excerpt": "I too skip all permissions, but I run the harnesses inside an isolated virtual machine. I took care to firejail Claude Code on my host since day one, and coding my own QEMU VM orchestration solution was among the first things I used it for. Alarm fatigue will quickly destroy any and all \"meticulously approve every little command the AI wants to run\" workflows. Give it a virtual machine and let it cook. If it blows up", "context": "", "use_case": "sandboxing agents", "switched_from": "", "story": "Auto mode is now the default in Claude Code"}]}