Easy Sandboxing on Linux with Bubblewrap
Summary
The article demonstrates an approachable method to sandbox Linux tooling using Bubblewrap, focusing on preventing host damage while keeping host binaries accessible. It provides a shell script that automates a bubblewrap invocation, binds essential directories read-only, overlays can be used for temporary workspaces, and discusses practical usage and caveats.