bubblewrap

🍷 Command-line tool to run Windows apps with Wine and bwrap/bubblewrap isolation on Linux

Another Linux sandbox tool (in beta). Rootless. Allows unlimited nesting if you want. Single-file python executable . No 3rd-party python lib needed.

🧼 A Python library that makes beautiful text bubbles in your terminal using NerdFont icons

Run Spark Desktop for Windows on Linux under Wine, with Google sign-in and native notifications

Modern SSH security for self-hosted Linux — Telegram-approved access, honeypot diversion, session recording, JIT user grants. One Python file.

Isolated workspace based on bubblewrap.

Powerful and flexible application isolation tool for Linux that uses bubblewrap to create secure, isolated environments for running applications. It provides enhanced security features, GUI application support, and configurable isolation levels.

Kartikeya — standalone bwrap-sandboxed task queue + worker (the Willow fleet's Kart engine, extracted). Backend-agnostic: SQLite or Postgres.

Stateful AI Agent Infrastructure with Persistent FTS5 Memory and Sandboxed Execution.

Coding agent sandbox. Everything in the box: zero network, zero credentials. Bubblewrap confinement plus credential-injecting egress proxies for Claude Code, Codex, and opencode.

Perplexity-style AI answer engine in Python/Flask — web search first, model code confined by a bubblewrap sandbox.

Encrypted notes for Linux, made for Omarchy. A GTK 4 window over one libsodium vault, launched in a bubblewrap sandbox with no network. Bar plugin and Hyprland window rules included. No accounts, no sync, no updates, nothing from pip.

把 Antigravity CLI 接入 Telegram，提供参考 Hermes 的多轮对话、任务控制、移动端回复和文件回传｜Hermes-inspired Telegram interface for Antigravity CLI.

Bwrap wrapper

Bounded shell and CLI execution for AI agents: structured contracts, policy-gated execution, hardened Linux runtime enforcement, and signed receipts.

Bubblewrap (bwrap) sandbox for Strands Agents — unprivileged Linux user-namespace command/code execution.

MCP server for sandboxed Python execution — bubblewrap on Linux, Docker on macOS. PEP 723 inline deps, multi-version Python, ephemeral environments.

Run your coding agent in a bubble.

Build an AUR package twice in an isolated sandbox and diff what each version actually does — supply-chain detection by behaviour, not static analysis.

Task queue on PostgreSQL for Python: asyncio handlers and bubblewrap-sandboxed processes, with a REST/MCP server