As an example we will look at man 1 bwrap. Bubblewrap allows us to sandbox an application, not too dissimilar to docker. Flatpaks use bubblewrap as part of their sandbox. Bubblewrap can optionally take in a list of syscalls to filter. The filter is expressed as a BPF(Berkley Packet Filter program - remember when I said docker gives you a friendlier interface to seccomp?) program. Below is a short program... - Source: dev.to / 19 days ago

I have already been using bubblewrap[1] to isolate KeePassXC from the network and more (the only access it has is to its own private directory and the Wayland socket). I wouldn't recommend relying on devs or maintainers to do application isolation work for you. [1] <https://github.com/containers/bubblewrap>. - Source: Hacker News / 28 days ago

Recently, I came across Chainguard and wrote the article How to build Docker Images with Melange and Apko. As a fervent supporter of Kubernetes and GitLab CI, I was eager to experiment with building images using Melange in this particular setup. GitLab's shared Runners work seamlessly with Bubblewrap, eliminating the need for additional configurations. This post is intended for enthusiasts like myself, interested... - Source: dev.to / 5 months ago

``` This is basically manually invoking what Flatpak does: https://github.com/containers/bubblewrap This is also useful for more than just security. E.G., you can test how your app would behave on a fresh install by masking your user configuration files. I personally also have a tool that uses it to basically bundle all dependencies from an entire Linux... - Source: Hacker News / 9 months ago

To, say, override the KDE plugins while testing. This is useful for me since it's rather challenging during development to actually get KDE apps to reliably load my plugins on NixOS: I think kio slaves are probably wrapped and getting other environments injected into them. Rather than bother with any tricky hacks, Linux namespaces make it relatively easy to test regardless. Bubblewrap is used internally by Flatpak... - Source: Hacker News / 11 months ago

I've been rewatching some of Conan's old travel remotes on https://teamcoco.com/ and I've noticed that quite a few of the older videos like the Conan in Armenia and Conan in Cuba episodes aren't able to be watched. Also, these are the digital exclusive videos that aren't available on youtube which makes it hard to find. I've tried using archive.org , but I've had no luck either. Is anyone else having this issue? Source: almost 2 years ago

I'd shared the link to Liza's "significant others" on teamcoco.com with a few friends but it's now broken- the podcast also does not seem to appear along with the other podcasts on the site anymore- it did previously🤔. Source: almost 2 years ago

SiriusXM buys Team Coco? Does that mean they also own the rights to all the video archives, including everything Conan Classic and all the remotes? Source: about 2 years ago

The teamcoco.com/podcasts website links to https://omny.fm/shows/conan-o-brien-needs-a-friend when you click on "Conan O'Brien Needs A Friend", but as of last week it looks like that site is no longer being updated (Melissa McCarthy episode is the most recent). Source: over 2 years ago

Don't they literally have that on teamcoco.com? At least they advertised it for a long time. They got the rights from NBC to show all the episodes of his old show. Source: almost 3 years ago