Awesome GitHub RepositoriesLinux Sandboxes

OrbStack is a native macOS application that replaces Docker Desktop, providing an all-in-one environment for running Docker containers, full Linux virtual machines, and local Kubernetes clusters. It runs Linux VMs directly on the macOS hypervisor framework for near-native performance, uses VirtioFS for fast bidirectional file sharing between macOS and Linux, and leverages Rosetta for near-native x86 emulation on Apple Silicon. The system assigns predictable local domain names to containers and VMs with automatic HTTPS certificate generation, forwards ports via event-driven updates, and stores

Bubblewrap es una utilidad de ejecución en sandbox sin privilegios para Linux que aísla los procesos del sistema host. Crea entornos seguros aprovechando los namespaces de Linux para separar los recursos del sistema, incluyendo las pilas de red, PID e IPC. El proyecto se distingue por permitir la ejecución de software no confiable sin requerir privilegios de root en la máquina host. Evita la escalada de privilegios deshabilitando la ejecución de binarios setuid y utiliza el mapeo de identidad de usuario para aislar los permisos de proceso del sistema operativo host. La herramienta gestiona una superficie de seguridad integral que incluye control de acceso al sistema de archivos para restringir la visibilidad de directorios y permisos de solo lectura. Reduce aún más la superficie de ataque del kernel mediante el filtrado de llamadas al sistema seccomp.

Youki is a low-level container runtime written in Rust that creates and manages isolated containers according to Open Container Initiative specifications. It serves as an execution engine that can function as a rootless container manager or a pluggable Kubernetes CRI runtime to manage pods and containers within a cluster. The project distinguishes itself by providing a Wasm container runtime capable of executing WebAssembly modules as isolated workloads compatible with standard orchestration tools. It further supports a rootless execution model, allowing isolated environments to start as non-

Sandstorm is an open-source platform that packages and runs web applications in security-hardened sandboxes on a personal server, functioning as a self-hosted web app operating system. It provides a curated app store where users discover and install sandboxed web applications with one-click ease, while each application runs in an isolated container that uses Linux kernel security features to separate it from the host and other apps. The platform includes a centralized authentication layer so users sign in once and gain access to all installed applications without managing separate accounts per

Firejail is a Linux application sandbox and kernel security wrapper that isolates untrusted applications from the host system. It uses kernel namespaces and seccomp filters to restrict filesystem access, drop kernel capabilities, and limit the system attack surface. The project is distinguished by its use of predefined security profiles to automatically apply filesystem restrictions and syscall limits based on the executable being launched. It provides specialized isolation for portable packages such as AppImages and implements X11 display isolation via proxy servers to prevent keyboard loggi

x11docker es un orquestador de GUI para contenedores OCI y un puente de hardware diseñado para ejecutar aplicaciones gráficas y entornos de escritorio completos dentro de contenedores. Funciona como un sandbox de GUI para Linux, conectando procesos en contenedores con servidores de visualización X11 o Wayland y sistemas de audio del host. El proyecto se diferencia por ofrecer una integración profunda del sistema para aceleración por hardware, incluyendo automatización de drivers NVIDIA y GPU passthrough. Soporta emulación de GUI entre arquitecturas y proporciona capacidades de acceso remoto mediante VNC, reenvío SSH y renderizado HTML5 basado en navegador. La herramienta cubre un amplio rango de capacidades de integración, incluyendo mapeo de identidad de espacios de nombres de usuario para seguridad, puente de sesiones D-Bus para comunicación entre procesos y sincronización bidireccional del portapapeles. También gestiona el uso compartido de periféricos como webcams e impresoras, así como la gestión de sistemas init y montaje de almacenamiento persistente. El software está implementado como una utilidad basada en shell que soporta múltiples backends compatibles con OCI, incluyendo Docker y Podman.

Bubblewrap is a Linux sandbox runner that creates lightweight, isolated execution environments for running untrusted applications. It combines Linux user, mount, network, PID, and UTS namespaces with seccomp-BPF system call filtering to restrict filesystem, network, process, and inter-process communication access. The project provides comprehensive process isolation by giving each sandbox its own private tmpfs root with selective bind-mounts, a separate network stack containing only a loopback interface, an independent process ID space, and remapped user and group identifiers. It applies secc

Flatpak is a sandboxed application framework and standardized packaging format for Linux desktop applications. It functions as a distribution system that allows a single application bundle to run consistently across multiple Linux operating systems without requiring per-distribution builds. The project provides a runtime dependency manager that bundles specific library versions or shared runtimes to create predictable execution environments. It includes a sandbox permission manager to control application access to system hardware and resources, ensuring security and consistent behavior betwee

Toolbox is a development workspace orchestrator and container environment manager that bootstraps mutable toolsets and SDKs inside containers. It functions as a Linux distribution sandbox and a host-integrated container runtime, allowing users to run native package managers and software without modifying the host operating system. The project differentiates itself by bridging isolated containers with the host system through the mapping of user identities, network sockets, and home directories. It utilizes a daemonless engine to provide these environments while ensuring that system configurati

Isolate es un sandbox de bajo nivel diseñado para ejecutar programas no confiables dentro de un entorno estrictamente controlado. Funciona como un motor de aislamiento de procesos que evita que el código potencialmente dañino interactúe con el sistema operativo host o lo dañe. La herramienta aprovecha las primitivas del kernel de Linux, incluyendo namespaces y grupos de control (cgroups), para particionar los recursos del sistema y aplicar límites de uso de hardware. Al aplicar la virtualización del sistema de archivos y el filtrado de llamadas al sistema, restringe la visibilidad y la interacción de un proceso con el host, asegurando que las aplicaciones no confiables operen solo dentro de parámetros de seguridad definidos. Más allá de la contención básica, el software proporciona mecanismos para limitar recursos y seguridad basada en capacidades para gestionar el consumo de CPU, memoria y entrada/salida. Admite pruebas de software seguras mediante la creación de entornos efímeros y aislados que protegen archivos sensibles del sistema y el hardware contra el acceso no autorizado.

Dify-sandbox is a secure runtime environment designed for the execution of untrusted code snippets. It functions as a containerized sandbox that isolates processes from the host operating system, ensuring that arbitrary scripts can be run without granting them unauthorized access to sensitive data or critical system resources. The project distinguishes itself through a multi-layered security approach that combines kernel-level isolation with strict resource management. By utilizing Linux namespaces and container-based process isolation, it partitions system resources to maintain visibility bo