sandbox-bwrap-nix
sandbox-bwrap-nix is a minimal sandbox that combines bubblewrap and Nix to provide an isolated environment for running commands, AI agents, and experiments on Linux. It addresses the concern of AI coding tools potentially deleting or altering files in the host's home directory, configuration files, or projects by creating a clean, isolated shell that boots in under a second.
The tool requires no daemon, no image pulls, and no root privileges. It works on any Linux machine with bubblewrap installed and Nix with flakes enabled. The project consists of a few files, with the main entry point being a shell script that invokes bwrap using a specific set of flags. It mounts the host's Nix store as read-only to allow use of any Nix package while providing the sandbox with its own temporary directory, home directory, and process namespace. The host filesystem remains invisible from within the sandbox. The script then executes nix develop inside the sandbox.
It is intended for users who run AI coding tools or experiments and seek a lightweight alternative to heavier container solutions such as Docker or Podman.
Open SourceWebSelf-hostedCLI
Overview
5 featuressandbox-bwrap-nix is a Developer Tools project. Risk of AI coding agents or experiments damaging host filesystems or configurations when running untrusted code. It is built as an open-source project for developers and AI researchers. sandbox-bwrap-nix is open source under the Open Source license. sandbox-bwrap-nix is available on the web and the command line, and it can be self-hosted.
Behind sandbox-bwrap-nix is Luigi, and it first shipped in 2025. Among its 5 catalogued features are Isolated Environment, Bubblewrap Integration, and Nix Flakes Support.
Summary written by a language model from the project’s public pages.
- Isolated Environment
- Bubblewrap Integration
- Nix Flakes Support
- No Root Required
- Fast Boot
Tags
linux-sandboxbubblewrapnix-flakesai-agent-securityisolated-environment
Built with & integrations
Runs on
BrowserSelf-hostedCLI
Trust & compliance
License
Open Source
Verified signals
HTTPSOpen SourceFree tier
Indexing history
What PulseGate has recorded for this listing
Nothing recorded for this listing in this window.
Frequently asked questions about sandbox-bwrap-nix
- What is sandbox-bwrap-nix?
- Risk of AI coding agents or experiments damaging host filesystems or configurations when running untrusted code. It is catalogued under Developer Tools on PulseGate.
- Who is sandbox-bwrap-nix for?
- sandbox-bwrap-nix is an open-source project built for developers and AI researchers.
- Does sandbox-bwrap-nix have a free plan?
- Yes — sandbox-bwrap-nix is open source under the Open Source license and free to use.
- What platforms does sandbox-bwrap-nix run on?
- sandbox-bwrap-nix runs on the web and the command line. It can also be self-hosted.
- Is sandbox-bwrap-nix still active?
- Unverified. sandbox-bwrap-nix has not been re-checked since it entered the index, so there is no finding either way — and only a positive finding would say otherwise.
- What are alternatives to sandbox-bwrap-nix?
- Similar projects tracked by PulseGate include EfficiencyNext Data Connector, System Information Widgets, and CKB.EfficiencyNext Data ConnectorSystem Information WidgetsCKB
- Who develops sandbox-bwrap-nix?
- sandbox-bwrap-nix is developed by Luigi.
- When did sandbox-bwrap-nix launch?
- sandbox-bwrap-nix first shipped in 2025.
Also in Developer Tools
Same category — not a similarity match