Bubblewrap is a setuid implementation of user namespaces, or sandboxing, that provides access to a subset of kernel user namespace features. Bubblewrap allows user owned processes to run in an isolated environment with limited access to the underlying filesystem.
Development versions of BLFS may not build or run some packages properly if dependencies have been updated since the most recent stable versions of the book.
Download (HTTP): https://github.com/containers/bubblewrap/releases/download/v0.8.0/bubblewrap-0.8.0.tar.xz
Download MD5 sum: fc0e14bc26df76225e8f8cc2df9fb657
Download size: 148 KB
Estimated disk space required: 3.4 MB (with tests)
Estimated build time: less than 0.1 SBU (with tests)
libxslt-1.1.38 (to generate manual pages) and libseccomp-2.5.4 (built with python bindings, for tests)
User Notes: https://wiki.linuxfromscratch.org/blfs/wiki/bubblewrap
Install Bubblewrap by running the following commands:
mkdir build && cd build && meson setup --prefix=/usr --buildtype=release .. && ninja
Next, if you desire to run the test suite, fix an issue caused by the merged-/usr configuration in LFS:
sed 's@symlink usr/lib64@ro-bind-try /lib64@' -i ../tests/libtest.sh
To test the results, issue (as a user other than the root
user): ninja
test
Now, as the root
user:
ninja install
--buildtype=release
:
Specify a buildtype suitable for stable releases of the package, as
the default may produce unoptimized binaries.