bubblewrap tips — authorized unprivileged-sandbox literacy

Snapshot

Tip checklist (authorized only)

1. Confirm you may run bwrap on the lab host (syllabus box you own or were given access to).
2. Prefer documenting who / why / ticket before any sandbox drill — never weaken production sandboxes without change control.
3. Record short factual notes; quote short Evidence (--ro-bind labels, --unshare-net flags — never secrets or foreign path dumps).
4. Optional: profile-sandbox peer → firejail-tips.
5. Optional: namespace peer → unshare-tips.
6. Prefer disposable lab trees for bubblewrap drills; quote non-secret bind labels afterward as Evidence.
7. Prefer read-only binds and syllabus-approved --unshare-* flags for most Evidence binders — refuse bypass/escape cookbooks.
8. Stop at literacy — no attack, jailbreak, or unauthorized sandbox-weaken cookbooks.

Allowed framing

• Classroom labs reviewing bwrap --ro-bind /usr /usr --unshare-net --die-with-parent literacy on authorized disposable hosts.
• Binding short factual notes as Evidence (bind labels/unshare flags — no secrets).
• Documenting expected vs observed sandbox behaviour for authorized inventory notes.
• Comparing bubblewrap ↔ Firejail / unshare / chroot / pivot_root peer tip pages under one binder.
• Testing syllabus-approved Flatpak-style sandbox patterns only when the lab authorizes that drill.

Scope we will not cover

• No crack/pirate/keygen via bubblewrap.
• No intentional unauthorized sandbox bypass or escape against foreign hosts.
• No jailbreak / bind-weaken cookbooks for production.
• No secret-theft or path credential harvesting against hosts you do not own.
• No cookbooks that disable bubblewrap protections without authorization.

Beginner path (authorized only)

1. Obtain one syllabus-approved disposable lab host with bubblewrap (bwrap) installed.
2. Prefer a throwaway lab tree before any deep drill.
3. With authorization, run a syllabus-approved bwrap --ro-bind ... --unshare-pid --die-with-parent /bin/true (or equivalent); quote non-secret bind/unshare labels as Evidence.
4. Optional: peer tip pages above when the syllabus asks.
5. Stop at literacy — no jailbreak or unauthorized bypass cookbooks.

Practical notes for authorized labs

• bubblewrap creates unprivileged namespaces via user namespaces — keep Evidence labels distinct from firejail-tips profile drills.
• Pair with unshare-tips when the syllabus zooms on lower-level namespace create.
• Bind mounts may expose sensitive paths — never paste secrets into notes or git.
• Prefer documenting bind labels the syllabus authorized without dumping full privileged inspect JSON.
• Never commit bwrap dumps with secrets to git — even for labs.
• Prefer the bubblewrap-tips slug; do not also publish a near-dupe bwrap-tips page.

FAQ-aligned refusals (quick)

• Foreign-host bubblewrap / escape drills → refuse.
• Jailbreak / sandbox-bypass cookbooks → refuse.
• Attack/credential-theft framing → refuse.

For legal, authorized and educational use only.

FAQ

Sources