containers/bubblewrap

Low-level unprivileged sandboxing tool used by Flatpak and similar projects

Stars: 8.8k
Forks: 387
Open beginner issues: 3
Indexed issues: 153
Avg merge: 2d 22h
Merged PRs (30d): 16

Dominant language: C
License: No license data
Last GitHub push: Sep 18, 2026
Latest indexed: Sep 15, 2026
Contributing guide: No contributing guide
Code of conduct: Code of conduct
Beginner labels: help wanted

Beginner friendly Everything

Open All

Ubuntu's backports of CVE-2026-87766 fixes break Flatpak Open

wontfix

Difficulty 4/5 3-5 days Newbie friendliness 55/100

containers/bubblewrap#801 · 3 comments · Opened Sep 17, 2026
Running sshd inside bubblewrap Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

containers/bubblewrap#787 · 2 comments · Opened Sep 7, 2026
using the overlay option causes kernel warnings "upper fs does not support file handles" Open

Difficulty 4/5 3-5 days Newbie friendliness 52/100

containers/bubblewrap#783 · 1 comment · 1 reaction · Opened Sep 4, 2026
Test suite does not seem to work properly when compiling inside /tmp Open

Difficulty 3/5 1-2 days Newbie friendliness 58/100

containers/bubblewrap#781 · 1 comment · Opened Aug 29, 2026
Feature Question: Unshare vs Clone Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

containers/bubblewrap#776 · 3 comments · Opened Aug 28, 2026
[FR] add -create suffix for --bind Open

Difficulty 3/5 1-2 days Newbie friendliness 65/100

containers/bubblewrap#768 · Opened Jul 27, 2026
bubblewrap manpage is desynced from source code Open

Difficulty 2/5 1-3 hours Newbie friendliness 70/100

containers/bubblewrap#767 · 2 comments · Opened Jul 19, 2026
Use "new mount API" if available Open

enhancement help wanted

Difficulty 5/5 Over a week Newbie friendliness 35/100

containers/bubblewrap#755 · 3 comments · 7 reactions · Opened May 29, 2026
bind mount /proc/<PID>/mountinfo ? Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

containers/bubblewrap#752 · 6 comments · Opened May 9, 2026
unshare-net fails on gvisor due to failing loopback setup Open

Difficulty 3/5 1-2 days Newbie friendliness 48/100

containers/bubblewrap#745 · 2 comments · 4 reactions · Opened Apr 26, 2026
bwrap has impact on the shell when finished Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

containers/bubblewrap#744 · 6 comments · Opened Apr 24, 2026
Related project comparisons in README.md are outdated Open

Difficulty 1/5 Under an hour Newbie friendliness 88/100

containers/bubblewrap#743 · 1 comment · Opened Apr 24, 2026
security-context-v1 support Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

containers/bubblewrap#736 · 3 comments · Opened Mar 17, 2026
--new-session inhibits bwrap's ability to terminate child process when parent is terminated Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

containers/bubblewrap#726 · 1 comment · Opened Dec 29, 2025
`--clearenv` leaks environment Open

Difficulty 3/5 1-2 days Newbie friendliness 48/100

containers/bubblewrap#725 · 3 comments · 6 reactions · Opened Dec 25, 2025
chanegd permissions after re-creating a char device under /dev Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

containers/bubblewrap#722 · Opened Dec 20, 2025
Add `--binfmt_misc` for mounting a `binfmt_misc` filesystem Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

containers/bubblewrap#721 · 1 reaction · Opened Dec 15, 2025
Comparison with `unshare` from util-linux Open

Difficulty 2/5 1-3 hours Newbie friendliness 55/100

containers/bubblewrap#720 · Opened Dec 10, 2025
--bind-try with empty argument unexpectedly bind-mounts whole filesystem Open

Difficulty 3/5 1-2 days Newbie friendliness 56/100

containers/bubblewrap#715 · 7 comments · 2 reactions · Opened Nov 17, 2025
Add comparison to gVisor and sandbox2 Open

Difficulty 1/5 Under an hour Newbie friendliness 55/100

containers/bubblewrap#714 · Opened Nov 14, 2025
Consider adding optional pre-configure seccomp filters Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

containers/bubblewrap#710 · 2 comments · Opened Nov 5, 2025
SECURITY.md refresh Open

Difficulty 2/5 1-3 hours Newbie friendliness 55/100

containers/bubblewrap#708 · 4 comments · Opened Oct 27, 2025
Massive bindings that requires more than 9000 args Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

containers/bubblewrap#703 · 8 comments · Opened Sep 20, 2025
Overlay arguments on DM-Verity / with overlayfs results in userxattr: Invalid argument Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

containers/bubblewrap#702 · 5 comments · Opened Sep 20, 2025
Have a specific exit code for when sandboxing is not possible Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

containers/bubblewrap#701 · 2 comments · Opened Sep 16, 2025
`PR_SET_PDEATHSIG` is racy unless there is a check for the parent having already died Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

containers/bubblewrap#700 · 6 comments · Opened Sep 9, 2025
Add a `--netns FD` option for preexisting namespaces Open

Difficulty 4/5 3-5 days Newbie friendliness 44/100

containers/bubblewrap#698 · 2 comments · 3 reactions · Opened Sep 3, 2025
child bwrap process is left as zombie Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

containers/bubblewrap#697 · 5 comments · 1 reaction · Opened Sep 1, 2025
locally-written launch script unexpectedly allows sandboxed app to overwrite its own .desktop file Open

Difficulty 4/5 3-5 days Newbie friendliness 30/100

containers/bubblewrap#695 · 6 comments · Opened Aug 5, 2025
--die-with-parent is a massive footgun Open

Difficulty 2/5 1-3 hours Newbie friendliness 35/100

containers/bubblewrap#692 · 1 comment · 2 reactions · Opened Jun 20, 2025
losing mounts on autofs restart Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

containers/bubblewrap#687 · Opened May 18, 2025
Had to replace symlink with ro-bind to get minimal example to work Open

Difficulty 3/5 1-2 days Newbie friendliness 42/100

containers/bubblewrap#686 · 3 comments · Opened Apr 21, 2025
bwrap can exit while overlayfs upper directory is still busy, preventing reuse in a subsequent command Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

containers/bubblewrap#672 · 5 comments · Opened Nov 14, 2024
`--bind` can cause bwrap to fail during startup if it races with the mount table changing Open

Difficulty 3/5 1-2 days Newbie friendliness 68/100

containers/bubblewrap#650 · 7 comments · Opened Aug 6, 2024
Add --cgroup flag for mounting cgroups Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

containers/bubblewrap#645 · 2 comments · 1 reaction · Opened Jul 22, 2024
Static analyzers see opt_args_data as leaked (but the leak is O(1) therefore not a real problem) Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

containers/bubblewrap#639 · 1 comment · Opened Jul 2, 2024
Child PID from `--info-fd` and `--json-status-fd` is not concurency safe Open

Difficulty 2/5 1-3 hours Newbie friendliness 35/100

containers/bubblewrap#634 · 3 reactions · Opened Jun 8, 2024
`--die-with-parent` fails to clean up due to a race condition if the parent bwrap process is killed soon after startup Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

containers/bubblewrap#633 · 1 comment · 2 reactions · Opened Jun 4, 2024
Is there like a native C Library? Open

enhancement help wanted

Difficulty 5/5 Over a week Newbie friendliness 30/100

containers/bubblewrap#626 · 5 comments · Opened Apr 14, 2024
enhancement: --daemonize-with-child option Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

containers/bubblewrap#614 · 1 reaction · Opened Dec 21, 2023
Overlayfs masking/whiteout layer Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

containers/bubblewrap#601 · 1 comment · Opened Sep 29, 2023
"pivot_root: Invalid argument" when running on a SLURM cluster node from NFS Open

help wanted

Difficulty 4/5 3-5 days Newbie friendliness 35/100

containers/bubblewrap#594 · 14 comments · Opened Sep 11, 2023
bubblewrap should fall back to MS_MOVE if pivot_root() fails Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

containers/bubblewrap#592 · 10 comments · Opened Sep 8, 2023
Build fails on Android using Clang 16 (termux) Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

containers/bubblewrap#579 · 8 comments · Opened May 4, 2023
Pass WINCH signal to child process Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

containers/bubblewrap#573 · 3 comments · Opened Apr 11, 2023
--bind non-world-x path with --unshare-user Open

Difficulty 4/5 3-5 days Newbie friendliness 42/100

containers/bubblewrap#570 · Opened Apr 4, 2023
--bind fails if directories above are not +rx Open

Difficulty 3/5 1-2 days Newbie friendliness 48/100

containers/bubblewrap#569 · Opened Apr 2, 2023
Default behaviour of `--cap-drop` Open

Difficulty 4/5 3-5 days Newbie friendliness 30/100

containers/bubblewrap#561 · 2 comments · Opened Mar 2, 2023
"--new-session" underadvertised and CVE-2017-5226 still a thing in 2023 by default? Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

containers/bubblewrap#555 · 11 comments · Opened Feb 28, 2023
Feature request: --json-status-fd could provide pid of command? Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

containers/bubblewrap#553 · 4 comments · 2 reactions · Opened Feb 9, 2023

Showing the newest 100

This page lists what was indexed most recently. Advanced filter has the whole inventory, narrowed by language, difficulty and how long a task takes.

Open advanced filter

containers/bubblewrap

Showing the newest 100

Get new issues in your inbox