Linux sandboxing tool https://crabjail.codeberg.page/

bubblewrap crabjail sandbox

You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Go to file

rusty-snake 6d4e5076c7 Update per-commit hook fmt: add --all clippy: add --deny=clippy::dbg_macro		12 months ago
build	Megacommit (2022-03-27)	1 year ago
build-aux	Minor updates	1 year ago
config	permissions: Add webkit2gtk-4.0	1 year ago
docs	Start 0.0.3 development	1 year ago
githooks	Update per-commit hook	12 months ago
macros	Move MSRV to 1.60	1 year ago
man	Start 0.0.3 development	1 year ago
src	utils.rs: Add timed macros J4F	1 year ago
.editorconfig	Megacommit (2022-02-22)	1 year ago
.gitattributes	Release: v0.0.1	2 years ago
.gitignore	Megacommit (2022-01-12)	1 year ago
.rustfmt.toml	Create .rustfmt.toml	2 years ago
AUTHORS	Release: v0.0.1	2 years ago
CHANGELOG.md	Move MSRV to 1.60	1 year ago
CONTRIBUTING.md	Update CHANGELOG.md	1 year ago
COPYING	Release: v0.0.1	2 years ago
Cargo.lock	Minor updates	1 year ago
Cargo.toml	Move MSRV to 1.60	1 year ago
README.md	Move MSRV to 1.60	1 year ago
clippy.toml	Megacommit (2022-01-12)	1 year ago
meson.build	Start 0.0.3 development	1 year ago
meson_options.txt	Release: v0.0.1	2 years ago
wrapper.h	nixe: add prctl	2 years ago

README.md

crabjail

Linux sandboxing tool.

TBD

Motivation

TBW

Technologies

Features

TBW

Installation

At the moment only x86_64 is supported.

Dependencies

bwrap (bubblewrap) >= 0.6.0
xdg-dbus-proxy
slirp4netns
libseccomp
udev

Prerequisites

Rust >= 1.60.0
meson >= 0.51
libudev development files
libseccomp development files
sphinx-build
furo (sphinx theme)
rst2man and rst2html5 (provided by docutils)

Fedora Linux:

dnf install cargo meson systemd-devel libseccomp-devel python3-sphinx python3-docutils
pip3 install furo

Build

meson _builddir --buildtype=release
meson compile -C _builddir

Install

meson install -C _builddir --no-rebuild

Usage

TBW

Examples

crabjail gnome-sudoku

_{In alphabetical order:}

_Others:

bubblewrap
chroot
Containers
- crun
- docker
- lxc
- lxd
- podman
- runc
- runsc aka. gVisor
- systemd-nspawn
flatpak
gVisor
Linux Security Modules (LSM)
- Mandatory Access Control (MAC)
  - AppArmor
  - SELinux
  - TOMOYO
- Landlock
Sandboxed API
Virtual Machines

Contributing

See CONTRIBUTING.md

Credits / Acknowledgments

FAQ

Links

Homepage: https://crabjail.codeberg.page/

Repository: https://codeberg.org/crabjail/crabjail

Bug-Tracker: https://codeberg.org/crabjail/issues

Changelog

See CHANGELOG.md for the full changelog.

Authors and Contributors

See AUTHORS

License

GPL-3.0-or-later, see COPYING for details.