# Install bubblewrap with Homebrew, apk, apt, dnf, Nix, pacman, zypper Unprivileged sandboxing tool for Linux. Version 0.11.2 via Homebrew; verified 2026-06-11. ## Install ```sh sudo av install brew:bubblewrap ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install bubblewrap ``` Evidence: local Homebrew formula metadata ### Linux - apk (92%): ```sh sudo apk add bubblewrap ``` Evidence: Alpine Linux edge package indexes: bubblewrap from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz - Debian apt (92%): ```sh sudo apt install bubblewrap ``` Evidence: Debian stable package indexes: bubblewrap from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - dnf (92%): ```sh sudo dnf install bubblewrap ``` Evidence: Fedora Rawhide package metadata: bubblewrap from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#bubblewrap ``` Evidence: nixpkgs package indexes: pkgs/by-name/bu/bubblewrap/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - pacman (92%): ```sh sudo pacman -S bubblewrap ``` Evidence: Arch Linux sync databases: bubblewrap from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz - zypper (92%): ```sh sudo zypper install bubblewrap ``` Evidence: openSUSE Tumbleweed package metadata: bubblewrap from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst ## Package facts - **Package key:** brew:bubblewrap - **Package manager:** Homebrew - **Package manager page:** - **Version:** 0.11.2 - **Source summary:** Unprivileged sandboxing tool for Linux - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** LGPL-2.0-or-later - **Source archive:** - **Last updated:** 2026-06-11T17:22:39Z - **Generated:** 2026-07-08T07:18:31+00:00 ## Executables - bwrap (cli) - bwrap (alias) ## Dependencies - libcap ## Build dependencies - docbook-xsl - libxslt - meson - ninja - pkgconf ## Install behavior - Post-install hook: not defined - Bottle: available on arm64_linux, x86_64_linux ## Freshness - Page generated: 2026-07-08 - Package-manager version: 0.11.2 - Package-manager updated: 2026-06-11 - Local data: ok - Upstream repository: https://github.com/containers/bubblewrap - info: No cached GitHub release or tag data was available. ## Project history and usage bubblewrap is a low-level Linux sandboxing tool that constructs restricted process environments with namespaces, bind mounts, seccomp, and related kernel features. It is best known as the small, auditable sandbox primitive used by Flatpak and similar desktop/container tools. ### Project history The bubblewrap README positions it against system-administrator container runtimes such as Docker and systemd-nspawn: those tools are not suitable to hand directly to unprivileged users, while bubblewrap is designed around unprivileged sandbox construction. The original code predates modern unprivileged user namespaces and inherits from xdg-app helper code, which in turn derives from linux-user-chroot. Older bubblewrap also supported a setuid mode for systems without unprivileged user namespaces, but the README notes that setuid support has been removed. The public GitHub repository was created in February 2016. The repository description identifies bubblewrap as a low-level unprivileged sandboxing tool used by Flatpak and similar projects, with topics for Linux containers and user namespaces. ### Adoption history bubblewrap spread because Flatpak and related desktop sandboxing systems needed a small shared primitive instead of each project carrying its own privileged helper. The README lists Flatpak, rpm-ostree unprivileged, and bwrap-oci as users or intended users. The input package metadata shows broad Linux distribution packaging through Alpine, Debian, Fedora/dnf, Nix, Arch/pacman, Ubuntu, and openSUSE/zypper, plus Homebrew. That breadth reflects its role as plumbing for sandbox frameworks rather than as an end-user application. Security-sensitive adoption is cautious: bubblewrap constructs a sandbox, but the actual security boundary depends on the arguments supplied by the caller. This makes it attractive for larger frameworks that own policy and want a narrow mechanism. ### How it is used bwrap creates a new mount namespace whose root is an empty tmpfs, then command-line options bind selected host paths, create proc/dev views, unshare namespaces, apply seccomp filters, and run a command inside the resulting environment. Typical direct use is scripting a constrained shell or process; typical indirect use is through Flatpak or another framework that assembles a policy-specific bwrap command. The project has no ordinary per-user config file or credentials store. ### Why package nerds care bubblewrap is package-manager-significant because a small CLI becomes part of the desktop Linux trust base. Its package version, setuid/user-namespace behavior, CVE history, and distribution kernel defaults can affect whether higher-level sandboxing stacks actually work. It is also a clean example of separating mechanism from policy: package the tiny sandbox constructor once, let Flatpak and peers define the higher-level sandbox rules. ### Timeline - Pre-2016: Code lineage passes through linux-user-chroot and xdg-app helper. - 2016: Public GitHub repository for bubblewrap is created. - 2010s: bubblewrap becomes associated with Flatpak-style application sandboxing. - 2020s: setuid mode is removed; user namespaces are the documented sandbox basis. - 2026: Tags include v0.11.x, showing continuing maintenance. ### Related projects - Flatpak is the most prominent higher-level application sandbox stack using bubblewrap. - xdg-app helper is part of bubblewrap's code lineage. - linux-user-chroot is an older related sandbox/chroot tool in the lineage. - Firejail is a comparable desktop sandboxing project discussed in the bubblewrap README. - xdg-dbus-proxy is commonly paired with bubblewrap to mediate D-Bus access. ### Sources - - - - source_facts.package-manager ## Security Notes narrow executable package without higher-risk signals. - **Geiger risk:** green / low - narrow executable package without higher-risk signals ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** bubblewrap - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Requirements:** linux - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Other Package-Manager Records - Debian apt - bubblewrap - 0.11.0-2+deb13u1: normalized package name match | Debian stable package indexes: bubblewrap from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | utility for unprivileged chroot and namespace manipulation | https://github.com/containers/bubblewrap - Nix - bubblewrap: normalized package name match | nixpkgs package indexes: pkgs/by-name/bu/bubblewrap/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - Ubuntu apt - bubblewrap - 0.9.0-1build1: normalized package name match | Ubuntu 24.04 LTS package indexes: bubblewrap from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | utility for unprivileged chroot and namespace manipulation | https://github.com/containers/bubblewrap - apk - bubblewrap - 0.11.2-r0: normalized package name match | Alpine Linux edge package indexes: bubblewrap from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Unprivileged sandboxing tool | https://github.com/containers/bubblewrap - apk - bubblewrap-bash-completion - 0.11.2-r0: normalized package name match | Alpine Linux edge package indexes: bubblewrap-bash-completion from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Bash completions for bubblewrap | https://github.com/containers/bubblewrap - apk - bubblewrap-doc - 0.11.2-r0: normalized package name match | Alpine Linux edge package indexes: bubblewrap-doc from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Unprivileged sandboxing tool (documentation) | https://github.com/containers/bubblewrap - apk - bubblewrap-static - 0.11.2-r0: normalized package name match | Alpine Linux edge package indexes: bubblewrap-static from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Unprivileged sandboxing tool (static binary) | https://github.com/containers/bubblewrap - apk - bubblewrap-zsh-completion - 0.11.2-r0: normalized package name match | Alpine Linux edge package indexes: bubblewrap-zsh-completion from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | Zsh completions for bubblewrap | https://github.com/containers/bubblewrap - dnf - bubblewrap - 0.11.0-4.fc44: normalized package name match | Fedora Rawhide package metadata: bubblewrap from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst | Core execution tool for unprivileged containers | https://github.com/containers/bubblewrap/ - pacman - bubblewrap - 0.11.2-1: normalized package name match | Arch Linux sync databases: bubblewrap from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | Unprivileged sandboxing tool | https://github.com/containers/bubblewrap - zypper - bubblewrap - 0.11.2-1.1: normalized package name match | openSUSE Tumbleweed package metadata: bubblewrap from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst | Core execution tool for unprivileged containers | https://github.com/containers/bubblewrap - zypper - bubblewrap-zsh-completion - 0.11.2-1.1: normalized package name match | openSUSE Tumbleweed package metadata: bubblewrap-zsh-completion from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst | Zsh tab-completion for bubblewrap | https://github.com/containers/bubblewrap ## Related links - [Cloud CLI packages](https://www.automicvault.com/pkg/cloud-clis/) - Belongs to a cloud or infrastructure command family. - [Source-control packages](https://www.automicvault.com/pkg/source-control-tools/) - Belongs to a source-control command family. - [Terminal utility packages](https://www.automicvault.com/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://www.automicvault.com/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [libcap](https://www.automicvault.com/pkg/brew/libcap/) - Runtime dependency declared by Homebrew. - [docbook-xsl](https://www.automicvault.com/pkg/brew/docbook-xsl/) - Build dependency declared by Homebrew. - [libxslt](https://www.automicvault.com/pkg/brew/libxslt/) - Build dependency declared by Homebrew. - [meson](https://www.automicvault.com/pkg/brew/meson/) - Build dependency declared by Homebrew. - [ninja](https://www.automicvault.com/pkg/brew/ninja/) - Build dependency declared by Homebrew. - [landrun](https://www.automicvault.com/pkg/brew/landrun/) - Shares av.db curated category or tags: cli, linux, sandbox, sandboxing, security. - [fence](https://www.automicvault.com/pkg/brew/fence/) - Shares av.db curated category or tags: cli, sandbox, sandboxing, security. - [libseccomp](https://www.automicvault.com/pkg/brew/libseccomp/) - Shares av.db curated category or tags: cli, linux, sandboxing, security. - [nono](https://www.automicvault.com/pkg/brew/nono/) - Shares av.db curated category or tags: cli, sandbox, sandboxing, security. - [sandvault](https://www.automicvault.com/pkg/brew/sandvault/) - Shares av.db curated category or tags: cli, sandbox, sandboxing, security. - [jailkit](https://www.automicvault.com/pkg/brew/jailkit/) - Shares av.db curated category or tags: cli, sandboxing, security. - [clair](https://www.automicvault.com/pkg/brew/clair/) - Shares av.db curated category or tags: cli, containers, security. - [copa](https://www.automicvault.com/pkg/brew/copa/) - Shares av.db curated category or tags: cli, containers, security. ## Combined YAML source View the package source record on GitHub. [combined/bubblewrap.yml](https://github.com/automic-vault/db/blob/main/combined/bubblewrap.yml) ## Sources - Nucleus package database - Geiger risk classifier - package-page enrichment - curated package history - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph