home.social

#bubblewrap — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #bubblewrap, aggregated by home.social.

fetched live
  1. Telegram Mini App для PWA-приложения: как я перешёл с TWA для RuStore и что выяснил по дороге

    Я разрабатываю PWA для голосовой практики английского. Несколько раз пытался опубликовать его в RuStore через Trusted Web Activity (TWA) — Google-обёртку, которая упаковывает PWA в подписанный Android AAB. После четырёх отказов модерации я понял, что для моего класса приложений TWA в RuStore не работает, и за день переключился на Telegram Mini App. Эта статья — не история стартапа, а разбор технических решений:

    habr.com/ru/articles/1029400/

    #telegram_mini_app #twa #trusted_web_activity #rustore #bubblewrap #pwa #android #hmac #авторизация

  2. Wrote a silly script to showcase how to use unshare + chroot/pivot_root in order to manually enter a / without needing privileges:

    gist.github.com/mid-kid/9293f4

    I rarely see anyone mention how this can be done without needing to reach for or systemd-nspawn, and I think it's important to see how you can leverage the primitives that drive container technology.

    The script can be simplified, but not without sacrificing correctness. I hope the comments help.

  3. Wrote a silly script to showcase how to use unshare + chroot/pivot_root in order to manually enter a #linux #chroot / #container without needing #root privileges:

    gist.github.com/mid-kid/9293f4

    I rarely see anyone mention how this can be done without needing to reach for #bubblewrap or systemd-nspawn, and I think it's important to see how you can leverage the primitives that drive container technology.

    The script can be simplified, but not without sacrificing correctness. I hope the comments help.

  4. Now I'm thinking about a new strategy:

    - stop service
    - make snapshot (seconds at max)
    - restart service
    - run from snapshot, but via so it sees it as the original path and inodes for consistency&performance!
    - run as many borg backups as desired to any remote, even in parallel, as the service is running again

    Thoughs?

  5. Now I'm thinking about a new strategy:

    - stop service
    - make #btrfs snapshot (seconds at max)
    - restart service
    - run #borgBackup from snapshot, but via #bubbleWrap so it sees it as the original path and inodes for consistency&performance!
    - run as many borg backups as desired to any remote, even in parallel, as the service is running again

    Thoughs?

    #nixos

  6. 🔗 UrlRoulette URL of the Day #430! 🌟

    Virtual bubble wrap - burst them all!
    Online bubble wrap popping, a stress-relief satisfying web app. Pop bubbles non-stop.

    This is our URL of the day 👉 urlroulette.net/ui/3m46tG3xrpCW 🚀

    #bubblewrap

  7. Good to know.

    #Bubblewrap creates isolated environments using #Linux kernel namespaces. It achieves this by creating a new, completely empty mount namespace where the root is mounted on a tmpfs. When installed, Bubblewrap provides a bwrap CLI tool that can be used to wrap any command (with caveats). Of special interest are coding agents like #OpenCode, Claude Code etc.

    patrickmccanna.net/a-better-wa

  8. Good to know.

    #Bubblewrap creates isolated environments using #Linux kernel namespaces. It achieves this by creating a new, completely empty mount namespace where the root is mounted on a tmpfs. When installed, Bubblewrap provides a bwrap CLI tool that can be used to wrap any command (with caveats). Of special interest are coding agents like #OpenCode, Claude Code etc.

    patrickmccanna.net/a-better-wa

  9. what i want to eventually see is a GUI program similar to #bottles, but for managing (#flatpak / #bubblewrap) -based sandboxes on #linux

    let's say i have some proprietary program or game i don't entirely trust, or that depends on libraries not supplied in my distro

    i want to be able to create a sort of container for it, pick one of the Freedesktop runtimes as the basis (maybe with some extras, like the GNOME or KDE libraries added), set which directories and interfaces the programs inside the container have access to, then just be able to copy files and run executables inside it

  10. CI/CD Week Day 2! Security is key! Running directly on the host (bareMetal) is fast, but system admins need control over what processes run.

    Enter Executor 2: bwrap (bubblewrap). This creates a very light container/sandbox, similar to what Flatpak uses!

    You get the same execution capability (e.g., running `echo "hello" > README.md`), but in a confined, isolated way. It's the best of both worlds: speed and security!

    Ready for the executor that lets you run any process? Follow me for tomorrow's reveal! 🐳

    #CICD #DevOps #Bubblewrap #Security #Containers

  11. CI/CD Week Day 2! Security is key! Running directly on the host (bareMetal) is fast, but system admins need control over what processes run.

    Enter Executor 2: bwrap (bubblewrap). This creates a very light container/sandbox, similar to what Flatpak uses!

    You get the same execution capability (e.g., running `echo "hello" > README.md`), but in a confined, isolated way. It's the best of both worlds: speed and security!

    Ready for the executor that lets you run any process? Follow me for tomorrow's reveal! 🐳

    #CICD #DevOps #Bubblewrap #Security #Containers

  12. 🍾🤡 #Bubblewrap, the high-tech innovation to #NetBSD, because who needs robust security when you can just pop your way to safety? 🎈✨ Welcome to the future of sandboxing: as strong as the packaging your last Amazon delivery came in. 🚀🛍️
    blog.netbsd.org/tnf/entry/gsoc #TechInnovation #Sandboxing #SecurityFail #FutureOfTech #HackerNews #ngated

  13. 🍾🤡 #Bubblewrap, the high-tech innovation to #NetBSD, because who needs robust security when you can just pop your way to safety? 🎈✨ Welcome to the future of sandboxing: as strong as the packaging your last Amazon delivery came in. 🚀🛍️
    blog.netbsd.org/tnf/entry/gsoc #TechInnovation #Sandboxing #SecurityFail #FutureOfTech #HackerNews #ngated

  14. I spent two hours yesterday debugging why my program which uses #bubblewrap and #overlayfs suddenly stopped working yesterday. Turns out, it was a kernel update and just needed a reboot...!

  15. I spent two hours yesterday debugging why my program which uses #bubblewrap and #overlayfs suddenly stopped working yesterday. Turns out, it was a kernel update and just needed a reboot...!

  16. A worthwhile project to harden your #NixOS even more by sandboxing applications via #bubblewrap: jail.nix.

    (I was using NixPak before which is also nice, but I find jail.nix to be of a nicer design, more flexible and minimalist at the same time).

    It is somewhat minimal and strict at the moment (for instance, It doesn't yet automatically forward the '*.desktop' files from the jailed apps), but perhaps that's one of the reasons I like it: it's fairly clear where things come from.

  17. A worthwhile project to harden your #NixOS even more by sandboxing applications via #bubblewrap: jail.nix.

    (I was using NixPak before which is also nice, but I find jail.nix to be of a nicer design, more flexible and minimalist at the same time).

    It is somewhat minimal and strict at the moment (for instance, It doesn't yet automatically forward the '*.desktop' files from the jailed apps), but perhaps that's one of the reasons I like it: it's fairly clear where things come from.

  18. Why Avoid Binaries in Early-Stage Projects?

    Auditability: Source code is readable, understandable, and can be version-controlled. Binaries (especially opaque ones) may include unknown payloads, telemetry, or hardcoded calls. #bubblewrap #firejail

  19. Why Avoid Binaries in Early-Stage Projects?

    Auditability: Source code is readable, understandable, and can be version-controlled. Binaries (especially opaque ones) may include unknown payloads, telemetry, or hardcoded calls. #bubblewrap #firejail

  20. For those who are used to #Bubblewrap on #Linux:

    @tobykurien has created a similar, very simple-to-use script for #FreeBSD offering a sandbox configuration that is compatible with Bubblewrap:

    fossil.tobykurien.com/freebsd-

  21. For those who are used to #Bubblewrap on #Linux:

    @tobykurien has created a similar, very simple-to-use script for #FreeBSD offering a sandbox configuration that is compatible with Bubblewrap:

    fossil.tobykurien.com/freebsd-

  22. Who else loves the little joy of popping #bubblewrap? 🤗

  23. Who else loves the little joy of popping #bubblewrap? 🤗

  24. Okay coach.. but what if we play NO starters in the preseason?

    Love the look into the decision-making of these 32 HC’s.

    #bubblewrap @[email protected]

  25. #SeTunneKun avaat paketin, ja näet ekaa kertaa elämässäsi JÄTTIKUPLAMUOVIA!

    Koko vartalossa ja aivoissa kihelmöi - kohta koittaa täyttymys!

    Ja sitten.

    Ja sitten.

    SITTEN SE EI PUHKEA!

    #antikliimaksi #pettymys #kuplamuovi #BubbleWrap #antiklimax