Awesome GitHub RepositoriesLinux Sandboxes

OrbStack is a native macOS application that replaces Docker Desktop, providing an all-in-one environment for running Docker containers, full Linux virtual machines, and local Kubernetes clusters. It runs Linux VMs directly on the macOS hypervisor framework for near-native performance, uses VirtioFS for fast bidirectional file sharing between macOS and Linux, and leverages Rosetta for near-native x86 emulation on Apple Silicon. The system assigns predictable local domain names to containers and VMs with automatic HTTPS certificate generation, forwards ports via event-driven updates, and stores

Bubblewrap ist ein unprivilegiertes Sandbox-Ausführungsdienstprogramm für Linux, das Prozesse vom Host-System isoliert. Es schafft sichere Umgebungen durch die Nutzung von Linux-Namespaces zur Trennung von Systemressourcen, einschließlich Netzwerk-, PID- und IPC-Stacks. Das Projekt zeichnet sich dadurch aus, dass es die Ausführung nicht vertrauenswürdiger Software ermöglicht, ohne Root-Rechte auf der Host-Maschine zu erfordern. Es verhindert Privilegienerweiterungen durch Deaktivierung der Ausführung von setuid-Binärdateien und verwendet Benutzeridentitäts-Mapping, um Prozessberechtigungen vom Host-Betriebssystem zu isolieren. Das Tool verwaltet eine umfassende Sicherheitsoberfläche, die Dateisystem-Zugriffskontrolle zur Einschränkung der Verzeichnissichtbarkeit und schreibgeschützte Berechtigungen umfasst. Es reduziert zudem die Angriffsfläche des Kernels durch seccomp-Systemaufruf-Filterung.

Youki is a low-level container runtime written in Rust that creates and manages isolated containers according to Open Container Initiative specifications. It serves as an execution engine that can function as a rootless container manager or a pluggable Kubernetes CRI runtime to manage pods and containers within a cluster. The project distinguishes itself by providing a Wasm container runtime capable of executing WebAssembly modules as isolated workloads compatible with standard orchestration tools. It further supports a rootless execution model, allowing isolated environments to start as non-

Sandstorm is an open-source platform that packages and runs web applications in security-hardened sandboxes on a personal server, functioning as a self-hosted web app operating system. It provides a curated app store where users discover and install sandboxed web applications with one-click ease, while each application runs in an isolated container that uses Linux kernel security features to separate it from the host and other apps. The platform includes a centralized authentication layer so users sign in once and gain access to all installed applications without managing separate accounts per

Firejail is a Linux application sandbox and kernel security wrapper that isolates untrusted applications from the host system. It uses kernel namespaces and seccomp filters to restrict filesystem access, drop kernel capabilities, and limit the system attack surface. The project is distinguished by its use of predefined security profiles to automatically apply filesystem restrictions and syscall limits based on the executable being launched. It provides specialized isolation for portable packages such as AppImages and implements X11 display isolation via proxy servers to prevent keyboard loggi

x11docker is an OCI container GUI orchestrator and hardware bridge designed to execute graphical applications and full desktop environments inside containers. It functions as a Linux GUI sandbox, linking containerized processes to host X11 or Wayland display servers and audio systems. The project differentiates itself by providing deep system integration for hardware acceleration, including NVIDIA driver automation and GPU passthrough. It supports cross-architecture GUI emulation and provides remote access capabilities through VNC, SSH forwarding, and browser-based HTML5 rendering. The tool

Bubblewrap is a Linux sandbox runner that creates lightweight, isolated execution environments for running untrusted applications. It combines Linux user, mount, network, PID, and UTS namespaces with seccomp-BPF system call filtering to restrict filesystem, network, process, and inter-process communication access. The project provides comprehensive process isolation by giving each sandbox its own private tmpfs root with selective bind-mounts, a separate network stack containing only a loopback interface, an independent process ID space, and remapped user and group identifiers. It applies secc

Flatpak is a sandboxed application framework and standardized packaging format for Linux desktop applications. It functions as a distribution system that allows a single application bundle to run consistently across multiple Linux operating systems without requiring per-distribution builds. The project provides a runtime dependency manager that bundles specific library versions or shared runtimes to create predictable execution environments. It includes a sandbox permission manager to control application access to system hardware and resources, ensuring security and consistent behavior betwee

Toolbox is a development workspace orchestrator and container environment manager that bootstraps mutable toolsets and SDKs inside containers. It functions as a Linux distribution sandbox and a host-integrated container runtime, allowing users to run native package managers and software without modifying the host operating system. The project differentiates itself by bridging isolated containers with the host system through the mapping of user identities, network sockets, and home directories. It utilizes a daemonless engine to provide these environments while ensuring that system configurati

Isolate ist eine Low-Level-Sandbox, die darauf ausgelegt ist, nicht vertrauenswürdige Programme in einer streng kontrollierten Umgebung auszuführen. Sie fungiert als Prozess-Isolations-Engine, die verhindert, dass potenziell schädlicher Code mit dem Host-Betriebssystem interagiert oder dieses beschädigt. Das Tool nutzt Linux-Kernel-Primitive, einschließlich Namespaces und Control Groups, um Systemressourcen zu partitionieren und Hardware-Nutzungsgrenzen durchzusetzen. Durch die Anwendung von Dateisystem-Virtualisierung und System-Call-Filtering schränkt es die Sichtbarkeit und Interaktion eines Prozesses mit dem Host ein und stellt sicher, dass nicht vertrauenswürdige Anwendungen nur innerhalb definierter Sicherheitsparameter operieren. Über die grundlegende Eindämmung hinaus bietet die Software Mechanismen für Ressourcenbegrenzung und fähigkeitsbasierte Sicherheit, um CPU-, Speicher- und I/O-Verbrauch zu verwalten. Sie unterstützt sicheres Software-Testing durch die Erstellung ephemerer, isolierter Umgebungen, die sensible Systemdateien und Hardware vor unbefugtem Zugriff schützen.

Dify-sandbox is a secure runtime environment designed for the execution of untrusted code snippets. It functions as a containerized sandbox that isolates processes from the host operating system, ensuring that arbitrary scripts can be run without granting them unauthorized access to sensitive data or critical system resources. The project distinguishes itself through a multi-layered security approach that combines kernel-level isolation with strict resource management. By utilizing Linux namespaces and container-based process isolation, it partitions system resources to maintain visibility bo