# Bubblewrap (bwrap)

11 Hacker News commenters recommended Bubblewrap (bwrap) and 4 criticized it, November 2025 to November 2026. It was recommended in 7 of 13 months. It meets the Hacker Approved badge rule.

**Verdict:** A simple Linux sandbox for isolating apps and agents without running a full container. Critics say its limits are real and its isolation is weaker than it looks.

## Why people recommend it

- Pairs well with Nix (2 comments): "The tools to do so are there (e.g. Nix and firejail/bwrap) and, unlike Wayland, they play well with existing software." ([source](https://news.ycombinator.com/item?id=46851807)) "I use nix + bwrap, which gives a similar result" ([source](https://news.ycombinator.com/item?id=48182603))
- Lighter than a full container (2 comments): "to properly sandbox without running a full container" ([source](https://news.ycombinator.com/item?id=48349615)) "At bare minimum use a simple jail such as bwrap" ([source](https://news.ycombinator.com/item?id=48786102))
- Used for untrusted code (2 comments): "I personally use bwrap if I'm not confident about the source." ([source](https://news.ycombinator.com/item?id=49268533)) "At bare minimum use a simple jail such as bwrap" ([source](https://news.ycombinator.com/item?id=48786102))

## What people warn about

- Weak isolation and unsafe defaults (4 comments): "These are massive footguns and issues for deploying code" ([source](https://news.ycombinator.com/item?id=49376385)) "Codex uses bwrap sandbox which is purely cosmetic" ([source](https://news.ycombinator.com/item?id=48893879)) "This only works for post-install script attacks." ([source](https://news.ycombinator.com/item?id=47583427))

## Alternatives hackers recommend

- [Bubblewrap (bwrap)](https://hackerapproved.com/p/bubblewrap.md): 109 recommend
- [Agent Safehouse](https://hackerapproved.com/p/agent-safehouse.md): 43 recommend
- [nono](https://hackerapproved.com/p/nono.md): 34 recommend
- [Firejail](https://hackerapproved.com/p/firejail.md): 30 recommend
- [sandbox-exec](https://hackerapproved.com/p/sandbox-exec.md): 25 recommend

## Cite as

Hacker Approved, "Bubblewrap (bwrap)", https://hackerapproved.com/p/bwrap/ (counts from 1,795,640 Hacker News comments, November 2025 to November 2026).