Vladimir Mikryukov
@vmikk.bsky.social
Fungal ecologist. Interested in bioinformatics, metagenomics & statistics. PostDoc at the University of Tartu, 🇪🇪
Nice read on sandboxing with bwrap: sloonz.github.io/posts/sandbo...
Sandboxing Applications with Bubblewrap: Securing a Basic Shell
Everybody knows that allowing different applications unlimited access to each other’s data is not exactly optimal from a security point of view. While servers have enjoyed containers to isolate applic...
sloonz.github.io
November 10, 2025 at 9:14 AM
Nice read on sandboxing with bwrap: sloonz.github.io/posts/sandbo...
Safeguard yourself: do backups (yes, now!), don't run random code on production systems. If you must run untrusted pipelines, you can bubblewrap them in a bwrap sandbox - here is an example (works transparently with conda envs & system tools): gist.github.com/vmikk/08212e...
Run shell commands in a lightweight sandbox (using `bubblewrap`)
Run shell commands in a lightweight sandbox (using `bubblewrap`) - sbx.sh
gist.github.com
November 10, 2025 at 9:14 AM
Safeguard yourself: do backups (yes, now!), don't run random code on production systems. If you must run untrusted pipelines, you can bubblewrap them in a bwrap sandbox - here is an example (works transparently with conda envs & system tools): gist.github.com/vmikk/08212e...