utility for unprivileged chroot and namespace manipulation


bubblewrap uses Linux namespaces to launch unprivileged containers. These containers can be used to sandbox semi-trusted applications such as Flatpak apps, image/video thumbnailers and web browser components, or to run programs in a different library stack such as a Flatpak runtime or a different Debian release.

By default, this package relies on a kernel with user namespaces enabled. Official Debian and Ubuntu kernels are suitable.

On kernels without user namespaces, system administrators can make the bwrap executable setuid root, allowing it to create unprivileged containers even though ordinary user processes cannot.

Upload more screenshots

Please help extend the collection of screenshots. Just make a screenshot and upload it here. You don't need to register or anything.

Upload a screenshot

Hint: upload an image here from your clipboard with Ctrl-V



Install this software package

If the package is available for the distribution you are currently using on your computer then install the software by clicking on…

Install bubblewrap