landrun
Fewer than 5 people recommend it so far, so there's no written verdict. Here is what commenters said.
4recommend
0warn against
Nov 25, 2025first mention
Jul 13, 2026latest mention
Why people recommend it
“Isn't landrun the preferred way to sandbox apps on linux these days instead?”
“Think firejail, but lightweight, user-friendly, and baked into the kernel.”
Show 3 more
“https://github.com/Zouuup/landrun”
“There are tools that use landlock to accomplish just that.”
“Check out https://github.com/anthropic-experimental/sandbox-runtime and https://github.com/Zouuup/landrun as examples on how you could restrict agents”
Caveats and dissent
No one in these comments warned against it.
Often compared with
Threads where it came up
- Bubblewrap: A nimble way to prevent agents from accessing your .env files 2 mentions
- Show HN: FixBugs – Reproduce production bugs and verify fixes 1 mention
- FUSE is All You Need – Giving agents access to anything via filesystems 1 mention
- We pwned X, Vercel, Cursor, and Discord through a supply-chain attack 1 mention
- Landlock-Ing Linux 1 mention
- Google Antigravity exfiltrates data via indirect prompt injection attack 1 mention
Data: landrun.json. Quotes are verbatim; the verdict and theme labels are written by a model from these comments, and every clause links to its sources.
All comments 7
“we are working on a prototype using the new landlock kernel interface (https://github.com/Zouuup/landrun)”
“personally this is the first time I heard about landrun”
“Isn't landrun the preferred way to sandbox apps on linux these days instead?”
“Think firejail, but lightweight, user-friendly, and baked into the kernel.”
“https://github.com/Zouuup/landrun”
“There are tools that use landlock to accomplish just that.”
“Check out https://github.com/anthropic-experimental/sandbox-runtime and https://github.com/Zouuup/landrun as examples on how you could restrict agents”