Skip to content

xlings-res/bwrap

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

1 Commit
 
 

Repository files navigation

bwrap (bubblewrap) — xlings-res mirror

Static-musl prebuilt of bubblewrap for xlings (xim:bwrap).

Build provenance

Built from the upstream containers/bubblewrap v0.11.2 release tarball inside an Alpine 3.20 container (musl 1.2.5, gcc 13.2) with deps: build-base meson samurai linux-headers libcap-dev libcap-static. Meson configure:

meson setup ../bwrap-build \
    --prefer-static -Ddefault_library=static \
    -Dman=disabled -Dselinux=disabled -Dtests=false \
    -Dbuildtype=release \
    -Dc_args="-Wno-error=format-overflow" \
    -Dc_link_args="-static"

(-Wno-error=format-overflow works around a gcc 13 false-positive on bubblewrap.c die() calls; functionally a no-op.)

Produces a single statically-linked ELF (bin/bwrap, ~137 KB stripped) with libcap linked in — zero runtime deps. Note: bwrap requires unprivileged user namespaces enabled on the host kernel (/proc/sys/kernel/unprivileged_userns_clone), or to run setuid.

xlings-res convention

Tarball is bwrap-<ver>-linux-x86_64.tar.gz, extracts to bwrap-<ver>-linux-x86_64/bin/bwrap. URLs are auto-resolved by the XLINGS_RES sentinel to:

  • GLOBAL → github.com/xlings-res/bwrap/releases/download/<ver>/bwrap-<ver>-linux-x86_64.tar.gz
  • CN → gitcode.com/xlings-res/bwrap/releases/download/<ver>/bwrap-<ver>-linux-x86_64.tar.gz

About

bubblewrap — unprivileged sandboxing tool (musl-static prebuilt for xlings xim:bwrap)

Resources

Stars

Watchers

Forks

Packages

 
 
 

Contributors