bwrap
No written verdict yet. Here is what commenters said.
6recommend
1warn against
Nov 28, 2025first mention
Sep 22, 2026latest mention
Why people recommend it
“decided to start using bwrap”
built own bwrap-based wrapperon “Show HN: Drop – A rootless Linux sandbox with gVisor…”
“Generate bwrap options (for use in bwrap or gVisor) rather than build the sandbox itself”
Caveats and dissent
“the 'bwrap' alias has this problem: `bash: cannot set terminal process group (1): Not a tty`”
Often compared with
Who recommends it in their own words
Threads where it came up
- Show HN: Drop – A rootless Linux sandbox with gVisor support 2 mentions
- Run isolated sandboxes with full lifecycle control: AWS introduces MicroVMs 1 mention
- Axios Compromised on NPM – Malicious Versions Drop Remote Access Trojan 1 mention
- LiteLLM Python package compromised by supply-chain attack 1 mention
- Noctia: A sleek and minimal desktop shell thoughtfully crafted for Wayland 1 mention
- GitLab discovers widespread NPM supply chain attack 1 mention
Data: bwrap.json. Quotes are verbatim; the verdict and theme labels are written by a model from these comments, and every clause links to its sources.
All comments 7
“decided to start using bwrap”
“Generate bwrap options (for use in bwrap or gVisor) rather than build the sandbox itself”
“the 'bwrap' alias has this problem: `bash: cannot set terminal process group (1): Not a tty`”
Check also https://github.com/wrr/drop which is a higher-level tool than bwrap. It allows you to make such isolated sandboxes with minimal configuration.
I am happily running all third-party tools inside the Amazing Sandbox[1]. I made it public last year. 1 - https://github.com/ashishb/amazing-sandbox
I recommend staying far away from x11libre. It's a red herring and nothing good will come out of that project. RedHat/Microsoft (but I repeat myself) is behind it. Study the drama that went on surrounding its launch. All that was meant to give the project street cred, like they're the rebel forces working against Big Brother. Nope, there's red flags all over that situation. Classic example of Controlled Opposition. T
I wrote myself a handy and generalized bwrap-wrapping script: https://github.com/sandbox-utils/sandbox-run