Bubblewrap

No entries match these filters. Clear filters

1. v0.13.1 Oct 14, 2026 · issue 109

   bubblewrap v0.13.1 allows multiple --sync-fd arguments to be passed in a single invocation.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v0.13.1 https://github.com/containers/bubblewrap.git
   # already have the repo? check out this version:
   $ git checkout v0.13.1

   └──▷ TRY IT
   Pass multiple synchronization file descriptors to coordinate with several parent processes or readiness checks simultaneously.
   copy

   $ bwrap --ro-bind /usr /usr --proc /proc --dev /dev --unshare-pid --sync-fd 5 --sync-fd 6 bash

   View command output v0.13.1

   ● actually ran exit 1 · 182ms · 00dd37d4dfa7

   bwrap copy

         $ bwrap --ro-bind /usr /usr --proc /proc --dev /dev --unshare-pid --sync-fd 5 --sync-fd 6 bash
   bwrap: No permissions to create a new namespace, likely because the kernel does not allow non-privileged user namespaces. On e.g. debian this can be enabled with 'sysctl kernel.unprivileged_userns_clone=1'.
   

2. v0.13.0 Sep 22, 2026 · issue 082

   Bubblewrap v0.13.0 adds mount_setattr()mount_setattr()A Linux system call, added in kernel 5.12, that changes attributes on a mount point or an entire mount tree atomically, letting cyber tools adjust propagation flags and ID mappings without remounting. for mount flag remounting, rejects empty path args, and introduces -Ddebug_logging=true with DEBUG_INVOCATION⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v0.13.0 https://github.com/containers/bubblewrap.git
   # already have the repo? check out this version:
   $ git checkout v0.13.0

   └──▷ TRY IT
   Build bubblewrap with debug logging enabled, then trigger verbose output for a sandboxed invocation to trace mount_setattr calls.
   copy

   $ meson setup _builddir -Ddebug_logging=true
   meson compile -C _builddir
   DEBUG_INVOCATION=1 _builddir/bwrap --ro-bind /usr /usr --proc /proc --dev /dev --unshare-pid bash

   • Adds -Ddebug_logging=true build option to enable verbose debug logging, gated at runtime by the DEBUG_INVOCATION environment variable.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Path arguments such as --bind and --overlay-src now reject empty strings instead of silently treating them as the root directory.
   • Adds -Ddebug_logging=true build option to enable verbose debug logging, gated at runtime by the DEBUG_INVOCATION environment variable.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   1 more in Everything

3. advisory CVE-2026-87766 Aug 26, 2026 · issue 128
   • CVE-2026-87766: CVE-2026-87766: Sandbox escape: symlink traversal via /oldroot allows writing files outside sandbox during setup (CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it. 8.8, affects < 0.12.0)⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
4. v0.12.0 Aug 26, 2026 · issue 058

   Bubblewrap v0.12.0 adds --not-a-security-boundary flag, assume_kernel build option, and drops setuid support

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v0.12.0 https://github.com/containers/bubblewrap.git
   # already have the repo? check out this version:
   $ git checkout v0.12.0

   └──▷ TRY IT
   Run a sandbox for a use case where filesystem layout isolation matters but strict security enforcement is not required, so that non-fatal setup failures are tolerated rather than aborting.
   copy

   $ bwrap --not-a-security-boundary --ro-bind /usr /usr --proc /proc --dev /dev --unshare-pid bash

   • Adds --not-a-security-boundary flag, which makes failures in sandbox setup steps (such as remounting a submount) non-fatal — enabling fail-open behavior for use cases that do not require a strict security boundary.
   • Adds assume_kernel meson build option; specifying 5.6.0 or later disables the fallback implementation of openat2(RESOLVE_IN_ROOT) and removes backward compatibility code for older kernels, resulting in hard failures at runtime on unsupported kernels.
   • Removes support for building a setuid bubblewrap; unprivileged user namespaces are now the sole supported mechanism.

   3 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !Setuid bubblewrap support has been removed entirely; deployments relying on the setuid build mode will no longer work and must migrate to unprivileged user namespaces.
5. advisory CVE-2026-41163 Apr 23, 2026 · issue 128
   • CVE-2026-41163: CVE-2026-41163: Privilege escalationPrivilege escalationGaining permissions beyond those an account or process initially had. It can turn limited access into administrator control or access to another user's resources. in setuid mode via ptrace (CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it. 7.0, affects 0.11.0)⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
6. v0.11.2 Apr 23, 2026 · release notes

   Bubblewrap v0.11.2 adds -Dsupport_setuid build option to disable setuid mode and harden deployments.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v0.11.2 https://github.com/containers/bubblewrap.git
   # already have the repo? check out this version:
   $ git checkout v0.11.2

   └──▷ TRY IT
   Build bubblewrap without setuid support so any accidental setuid installation is rejected at runtime, eliminating exposure to setuid-only CVEs.
   copy

   $ meson setup builddir -Dsupport_setuid=false && ninja -C builddir

   • New build option -Dsupport_setuid=false (now the default) disables setuid support at compile time, causing binaries to refuse to run if made setuid.

   1 detail in Everything

7. v0.11.0 Oct 30, 2024 · release notes

   Bubblewrap v0.11.0 adds overlay mount support and structured log-level output for better toolchain integration.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v0.11.0 https://github.com/containers/bubblewrap.git
   # already have the repo? check out this version:
   $ git checkout v0.11.0

   └──▷ TRY IT
   Capture bubblewrap log output with systemd-cat so sandbox messages appear in the journal with proper priority levels.
   copy

   $ bwrap --level-prefix --ro-bind / / -- myapp 2>&1 | systemd-cat --level-prefix=1

   • Adds --overlay, --tmp-overlay, --ro-overlay, and --overlay-src options to create overlay mounts inside sandboxes (unavailable in setuid installations).
   • Adds --level-prefix option to emit log output parseable by logger --prio-prefix and systemd-cat --level-prefix=1.

   2 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !The Autotools build system has been removed; Meson ≥ 0.49.0 is now required to build bubblewrap from source.
8. v0.10.0 Aug 14, 2024 · release notes

   Bubblewrap v0.10.0 adds --[ro-]bind-fd to mount filesystems via file descriptor, eliminating TOCTOU risks.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v0.10.0 https://github.com/containers/bubblewrap.git
   # already have the repo? check out this version:
   $ git checkout v0.10.0

   └──▷ TRY IT
   Mount a directory into the sandbox via a pre-opened file descriptor to eliminate TOCTOU race conditions — useful when the caller needs to verify the path before passing it to bwrap.
   copy

   $ bwrap --bind-fd 5 /mnt/sandbox-root ... 5</path/to/trusted/dir

9. v0.6.3 Aug 14, 2024 · release notes

   Bubblewrap v0.6.3 backports --[ro-]bind-fd to mount filesystems via file descriptor without TOCTOU attacks.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v0.6.3 https://github.com/containers/bubblewrap.git
   # already have the repo? check out this version:
   $ git checkout v0.6.3

   • Adds --bind-fd and --ro-bind-fd options (backported from 0.10.0) to mount a filesystem represented by a file descriptor, eliminating time-of-check/time-of-use (TOCTOU) race conditions.

   1 detail in Everything

10. v0.9.0 Mar 26, 2024 · release notes

    Adds --argv0 flag to set the executable name inside the sandbox.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.9.0 https://github.com/containers/bubblewrap.git
    # already have the repo? check out this version:
    $ git checkout v0.9.0

    └──▷ USE IT
    Set the binary name visible to processes inside the sandbox to my-app instead of bubblewrap.
    shell copy

    bwrap --argv0 my-app --run bash

    Create a symlink in the sandbox that remains valid and idempotent even if it already points to the correct target.
    shell copy

    bwrap --symlink /host/lib:/usr/lib --run bash

    • Adds --argv0 argument
    • --symlink is now idempotent

    2 details in Everything

11. v0.8.0 Feb 27, 2023 · release notes

    Adds --disable-userns and --assert-userns-disabled flags to control user namespace nesting

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.8.0 https://github.com/containers/bubblewrap.git
    # already have the repo? check out this version:
    $ git checkout v0.8.0

    • --assert-userns-disabled: checks that an existing userns was created with --disable-userns.

    1 detail in Everything

12. v0.7.0 Nov 7, 2022 · release notes

    Adds --size flag to dynamically control tmpfs mount size

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.7.0 https://github.com/containers/bubblewrap.git
    # already have the repo? check out this version:
    $ git checkout v0.7.0

    └──▷ USE IT
    Create a sandboxed environment with a custom-sized tmpfs mount instead of the default.
    shell copy

    bwrap --size 512m --tmpfs /tmp

    • --size option controls the size of a subsequent --tmpfs

    1 detail in Everything

13. v0.6.2 May 11, 2022 · release notes

    Adds Meson subproject support via -Dbwrapdir and -Dtests options

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.6.2 https://github.com/containers/bubblewrap.git
    # already have the repo? check out this version:
    $ git checkout v0.6.2

    └──▷ USE IT
    Install Bubblewrap into a custom directory while building it as part of a larger Meson project.
    shell copy

    meson setup build -Dbwrapdir=/opt/bwrap

    • -Dbwrapdir=... changes the installation directory for Bubblewrap when used as a Meson subproject
    • -Dtests=false disables unit tests during the Meson build configuration

    2 details in Everything

14. v0.6.0 Feb 24, 2022 · release notes

    Adds --add-seccomp flag to specify multiple seccomp profiles

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.6.0 https://github.com/containers/bubblewrap.git
    # already have the repo? check out this version:
    $ git checkout v0.6.0

    └──▷ USE IT
    Apply a base security policy and then add custom restrictions for specific system calls.
    shell copy

    bwrap --seccomp base.json --add-seccomp custom-restrictions.json /bin/sh

    • Adds --add-seccomp option to allow specifying multiple seccomp program files

    1 detail in Everything

15. v0.5.0 Aug 20, 2021 · release notes

    Adds --chmod, --clearenv, and --perms flags to control permissions in bwrap v0.5.0

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.5.0 https://github.com/containers/bubblewrap.git
    # already have the repo? check out this version:
    $ git checkout v0.5.0

    • Adds --chmod flag to change permissions of bound files or directories after they are mounted.
    • Adds --clearenv flag to unset every environment variable except PWD during sandbox execution.
    • Adds --perms flag to set specific permissions for a subsequent mount point like --bind-data, --dir, --file, --ro-bind-data, or --tmpfs.

    3 details in Everything

16. v0.4.0 Nov 27, 2019 · release notes

    Adds --userns, --userns2, and --pidns flags to join existing user and PID namespaces

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.4.0 https://github.com/containers/bubblewrap.git
    # already have the repo? check out this version:
    $ git checkout v0.4.0

    └──▷ TRY IT
    Re-use an existing user namespace by ID for container isolation without creating a new one
    copy

    $ bwrap --userns <namespace_id> --die-with-parent /bin/sh

    Join an existing PID namespace to share process visibility with another container or host process
    copy

    $ bwrap --pidns <pid_namespace_id> --unshare-cgroup /bin/sh

    • Adds --userns flag to join an existing user namespace instead of creating a new one
    • Adds --userns2 flag for additional user namespace support in unshare operations
    • Adds --pidns flag to join an existing PID namespace
    • Adds namespace IDs to the status/json output via the namespace_id field

    4 details in Everything

17. v0.3.3 May 1, 2019 · release notes

    bwrap v0.3.3 adds --json-status-fd to expose inner process exit code via JSON

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.3.3 https://github.com/containers/bubblewrap.git
    # already have the repo? check out this version:
    $ git checkout v0.3.3

    • Adds --json-status-fd flag to bwrap for reporting the child process exit code in JSON format
    • Updates JSON API output under --json-status-fd to include the COMMAND exit code separate from bwrap's own exit code

    2 details in Everything

18. v0.3.1 Sep 26, 2018 · release notes

    Adds --bind-try, --dev-bind-try, and --ro-bind-try flags to make bind mounts optional.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.3.1 https://github.com/containers/bubblewrap.git
    # already have the repo? check out this version:
    $ git checkout v0.3.1

    └──▷ TRY IT
    Mount a host config file only if it exists, preventing bwrap failure when the file is missing.
    copy

    $ bwrap --bind-try /etc/myapp.conf /etc/myapp.conf

    • Adds --bind-try, --dev-bind-try, and --ro-bind-try CLI flags that act like regular binds if source exists, or do nothing if it does not
    • Changes default root tmpfs mount type from empty string to explicit tmpfs

    2 details in Everything

19. v0.3.0 Jul 11, 2018 · release notes

    Bubblewrap v0.3.0 adds recursive invocation support and -- argument termination

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.3.0 https://github.com/containers/bubblewrap.git
    # already have the repo? check out this version:
    $ git checkout v0.3.0

    └──▷ TRY IT
    Verify the new argument termination feature is available in your environment.
    copy

    $ bwrap --version | grep -q '\-\-' && echo "Support present" || echo "Unsupported"

    • Adds -- pseudo-argument to terminate option parsing on the bwrap CLI
    • Enables recursive invocation of bwrap inside other container runtimes (Docker, Podman, runc) when user namespaces are permitted

    2 details in Everything

20. v0.2.0 Oct 9, 2017 · release notes

    Bubblewrap v0.2.0 adds --as-pid1, --cap-add, --cap-drop, and --userns-block-fd for init systems and capability control

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.2.0 https://github.com/containers/bubblewrap.git
    # already have the repo? check out this version:
    $ git checkout v0.2.0

    • Adds --as-pid1 argument to enable running a full init system like systemd inside bubblewrap
    • Adds --cap-add and --cap-drop CLI arguments to retain or drop specific Linux capabilities within the sandbox
    • Adds --userns-block-fd argument and corresponding --unshare-all bash completion for user namespace operations

    3 details in Everything

21. v0.1.8 Mar 28, 2017 · release notes

    Adds --die-with-parent flag to prevent process leakage when the parent exits

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.1.8 https://github.com/containers/bubblewrap.git
    # already have the repo? check out this version:
    $ git checkout v0.1.8

    └──▷ USE IT
    Run a build inside a sandbox that automatically cleans up all internal processes if the calling script or CI step is killed or finishes.
    shell copy

    bwrap --die-with-parent make check

    • Adds --die-with-parent CLI flag to kill child processes if bwrap's own parent process terminates

    1 detail in Everything

22. v0.1.7 Jan 18, 2017 · release notes

    Bubblewrap v0.1.7 adds --new-session, --unshare-all, and --share-net flags

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.1.7 https://github.com/containers/bubblewrap.git
    # already have the repo? check out this version:
    $ git checkout v0.1.7

    • Adds --new-session flag to conditionally create a new session ID via setsid()
    • Adds --unshare-all shorthand that unshares all currently supported namespaces (user, ipc, pid, net, uts, cgroup)
    • Adds --share-net flag to exclude the network namespace from unsharing when used with --unshare-all

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !setsid() is no longer called unconditionally by default; you must explicitly use --new-session if you require a new session ID