{"slug": "landrun", "name": "landrun", "category": "security", "category_name": "Security and passwords", "description": "", "recommenders": 4, "commenters": 6, "warners": 0, "score": 3.725, "rising": -1.31, "first": "2025-11-25", "latest": "2026-07-13", "why": "Check out https://github.com/anthropic-experimental/sandbox-runtime and https://github.com/Zouuup/landrun as examples on how you could restrict agents", "why_is_quote": true, "has_verdict": false, "sentiment": {"recommend": 5, "neutral": 1, "compare": 1, "warn": 0}, "spark": [2, 1, 2, 0, 0, 0, 0, 0, 0, 0, 0, 0], "listed": true, "loved": [], "caveat": "", "short_quote": "Check out https://github.com/anthropic-experimental/sandbox-runtime and https://github.com/Zouuup/landrun as examples on how you could restrict agents", "kind": "", "icon": false, "domain": null, "github_repo": "github.com/zouuup/landrun", "official_url": "https://github.com/Zouuup/landrun", "pricing": "", "aliases": ["landrun"], "verdict": null, "praise": [{"label": "", "summary": "", "quotes": [{"id": 746068144, "item_id": 46629259, "url": "https://news.ycombinator.com/item?id=46629259", "by": "prmoustache", "date": "2026-01-14", "version": null, "stance": "recommend", "quote": "Isn't landrun the preferred way to sandbox apps on linux these days instead?", "excerpt": "Isn't landrun the preferred way to sandbox apps on linux these days instead? https://github.com/Zouuup/landrun", "context": "", "use_case": "Linux app sandboxing", "switched_from": "", "story": "Bubblewrap: A nimble way to prevent agents from accessing your .env files"}, {"id": 745326946, "item_id": 46582934, "url": "https://news.ycombinator.com/item?id=46582934", "by": "Imustaskforhelp", "date": "2026-01-11", "version": null, "stance": "recommend", "quote": "Think firejail, but lightweight, user-friendly, and baked into the kernel.", "excerpt": "I recently had a question about what AI sandboxes use and I think Modal uses gvisor under the hood and I think others use firecracker/generally favour it as well Firecracker kind of ends up being in the VM categories and I would place gvisor in a similar category too under the VM So in my opinion, VM's are sandboxes. Of course there is also libriscv https://github.com/libriscv/libriscv which is a sandbox (The fastest", "context": "", "use_case": "", "switched_from": "", "story": "FUSE is All You Need \u2013 Giving agents access to anything via filesystems"}, {"id": 741171185, "item_id": 46323199, "url": "https://news.ycombinator.com/item?id=46323199", "by": "prmoustache", "date": "2025-12-18", "version": null, "stance": "recommend", "quote": "https://github.com/Zouuup/landrun", "excerpt": "https://man.freebsd.org/cgi/man.cgi?jail https://github.com/Zouuup/landrun", "context": "", "use_case": "sandboxing", "switched_from": "", "story": "We pwned X, Vercel, Cursor, and Discord through a supply-chain attack"}, {"id": 737462016, "item_id": 46091376, "url": "https://news.ycombinator.com/item?id=46091376", "by": "razighter777", "date": "2025-11-29", "version": null, "stance": "recommend", "quote": "There are tools that use landlock to accomplish just that.", "excerpt": "Yup. There are tools that use landlock to accomplish just that. https://github.com/Zouuup/landrun All you gotta do is apply a policy and do a fork() exec(). There is also support in firejail.", "context": "", "use_case": "", "switched_from": "", "story": "Landlock-Ing Linux"}, {"id": 736821473, "item_id": 46051342, "url": "https://news.ycombinator.com/item?id=46051342", "by": "thomas34298", "date": "2025-11-25", "version": null, "stance": "recommend", "quote": "Check out https://github.com/anthropic-experimental/sandbox-runtime and https://github.com/Zouuup/landrun as examples on how you could restrict agents", "excerpt": "That's the entire point of sandboxing, so none of what you listed would be accessible by default. Check out https://github.com/anthropic-experimental/sandbox-runtime and https://github.com/Zouuup/landrun as examples on how you could restrict agents for example.", "context": "", "use_case": "sandboxing AI agents", "switched_from": "", "story": "Google Antigravity exfiltrates data via indirect prompt injection attack"}]}], "caveats": [], "who": [], "tags": [], "use_cases": ["linux app sandboxing", "linux sandboxing", "sandboxing", "sandboxing ai agents"], "compared": [{"slug": "firejail", "name": "firejail", "co": 2, "switched_from": 0, "switched_to": 0}], "makers": [], "threads": [{"url": "https://news.ycombinator.com/item?id=46626836", "title": "Bubblewrap: A nimble way to prevent agents from accessing your .env files", "mentions": 2}, {"url": "https://news.ycombinator.com/item?id=48900465", "title": "Show HN: FixBugs \u2013 Reproduce production bugs and verify fixes", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=46580136", "title": "FUSE is All You Need \u2013 Giving agents access to anything via filesystems", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=46317098", "title": "We pwned X, Vercel, Cursor, and Discord through a supply-chain attack", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=46090969", "title": "Landlock-Ing Linux", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=46048996", "title": "Google Antigravity exfiltrates data via indirect prompt injection attack", "mentions": 1}], "sentiment_by_month": {"2025-11": {"recommend": 2}, "2025-12": {"recommend": 1}, "2026-01": {"recommend": 2, "compare": 1}, "2026-02": {}, "2026-03": {}, "2026-04": {}, "2026-05": {}, "2026-06": {}, "2026-07": {"neutral": 1}, "2026-08": {}, "2026-09": {}, "2026-10": {}}, "versions": [], "version_unnamed": 0, "family_ref": null, "runs_on": null, "lines": [], "quotes": [{"id": 782435537, "item_id": 48902221, "url": "https://news.ycombinator.com/item?id=48902221", "by": "kirtivr", "date": "2026-07-13", "version": null, "stance": "neutral", "quote": "we are working on a prototype using the new landlock kernel interface (https://github.com/Zouuup/landrun)", "excerpt": "On Linux, we rely on a chroot-ed workspace at this time - although we are working on a prototype using the new landlock kernel interface (https://github.com/Zouuup/landrun). OSX is the best, we use the in-built (seatbelt) sandbox via sandbox-exec. For Windows, we use WSL containers when available. By default, if a safe sandbox environment is not available, we inform the user that a repro is not possible in the curren", "context": "", "use_case": "Linux sandboxing", "switched_from": "", "story": "Show HN: FixBugs \u2013 Reproduce production bugs and verify fixes"}, {"id": 746076849, "item_id": 46629803, "url": "https://news.ycombinator.com/item?id=46629803", "by": "qrobit", "date": "2026-01-15", "version": null, "stance": "compare", "quote": "personally this is the first time I heard about landrun", "excerpt": "Bubblewrap seems to be much more popular[^1], personally this is the first time I heard about landrun [1]: https://repology.org/project/bubblewrap/information https://repology.org/project/landrun/information", "context": "", "use_case": "Linux app sandboxing", "switched_from": "", "story": "Bubblewrap: A nimble way to prevent agents from accessing your .env files"}, {"id": 746068144, "item_id": 46629259, "url": "https://news.ycombinator.com/item?id=46629259", "by": "prmoustache", "date": "2026-01-14", "version": null, "stance": "recommend", "quote": "Isn't landrun the preferred way to sandbox apps on linux these days instead?", "excerpt": "Isn't landrun the preferred way to sandbox apps on linux these days instead? https://github.com/Zouuup/landrun", "context": "", "use_case": "Linux app sandboxing", "switched_from": "", "story": "Bubblewrap: A nimble way to prevent agents from accessing your .env files"}, {"id": 745326946, "item_id": 46582934, "url": "https://news.ycombinator.com/item?id=46582934", "by": "Imustaskforhelp", "date": "2026-01-11", "version": null, "stance": "recommend", "quote": "Think firejail, but lightweight, user-friendly, and baked into the kernel.", "excerpt": "I recently had a question about what AI sandboxes use and I think Modal uses gvisor under the hood and I think others use firecracker/generally favour it as well Firecracker kind of ends up being in the VM categories and I would place gvisor in a similar category too under the VM So in my opinion, VM's are sandboxes. Of course there is also libriscv https://github.com/libriscv/libriscv which is a sandbox (The fastest", "context": "", "use_case": "", "switched_from": "", "story": "FUSE is All You Need \u2013 Giving agents access to anything via filesystems"}, {"id": 741171185, "item_id": 46323199, "url": "https://news.ycombinator.com/item?id=46323199", "by": "prmoustache", "date": "2025-12-18", "version": null, "stance": "recommend", "quote": "https://github.com/Zouuup/landrun", "excerpt": "https://man.freebsd.org/cgi/man.cgi?jail https://github.com/Zouuup/landrun", "context": "", "use_case": "sandboxing", "switched_from": "", "story": "We pwned X, Vercel, Cursor, and Discord through a supply-chain attack"}, {"id": 737462016, "item_id": 46091376, "url": "https://news.ycombinator.com/item?id=46091376", "by": "razighter777", "date": "2025-11-29", "version": null, "stance": "recommend", "quote": "There are tools that use landlock to accomplish just that.", "excerpt": "Yup. There are tools that use landlock to accomplish just that. https://github.com/Zouuup/landrun All you gotta do is apply a policy and do a fork() exec(). There is also support in firejail.", "context": "", "use_case": "", "switched_from": "", "story": "Landlock-Ing Linux"}, {"id": 736821473, "item_id": 46051342, "url": "https://news.ycombinator.com/item?id=46051342", "by": "thomas34298", "date": "2025-11-25", "version": null, "stance": "recommend", "quote": "Check out https://github.com/anthropic-experimental/sandbox-runtime and https://github.com/Zouuup/landrun as examples on how you could restrict agents", "excerpt": "That's the entire point of sandboxing, so none of what you listed would be accessible by default. Check out https://github.com/anthropic-experimental/sandbox-runtime and https://github.com/Zouuup/landrun as examples on how you could restrict agents for example.", "context": "", "use_case": "sandboxing AI agents", "switched_from": "", "story": "Google Antigravity exfiltrates data via indirect prompt injection attack"}]}