1 रिपॉजिटरी
Gives the sandbox its own network namespace with only a loopback device, cutting off all external network connectivity.
Distinct from Network Namespace Virtualization: Distinct from Network Namespace Virtualization: focuses on providing only a loopback device for network isolation, not general network namespace creation.
Explore 1 awesome GitHub repository matching devops & infrastructure · Loopback-Only Network Isolation. Refine with filters or upvote what's useful.
Bubblewrap is a Linux sandbox runner that creates lightweight, isolated execution environments for running untrusted applications. It combines Linux user, mount, network, PID, and UTS namespaces with seccomp-BPF system call filtering to restrict filesystem, network, process, and inter-process communication access. The project provides comprehensive process isolation by giving each sandbox its own private tmpfs root with selective bind-mounts, a separate network stack containing only a loopback interface, an independent process ID space, and remapped user and group identifiers. It applies secc
Gives the sandbox its own network namespace with only a loopback device, cutting off all external network connectivity.