Bubblewrap sandbox executor plugin for Docketeer
Verified details
These details have been verified by PyPIProject links
GitHub Statistics
Maintainers
Project description
docketeer-bubblewrap
Sandboxed command execution for Docketeer
using bubblewrap (bwrap).
This plugin provides a CommandExecutor implementation that runs external
programs inside a lightweight Linux sandbox using unprivileged user namespaces.
Each process gets its own PID, UTS, IPC, and cgroup namespaces, and network
access is denied by default. The --die-with-parent flag ensures sandboxed
processes are cleaned up if the parent exits.
Requirements
- Linux with unprivileged user namespaces enabled
bwraponPATH(install via your distro'sbubblewrappackage)
How it works
The executor builds a minimal filesystem view inside the sandbox:
- Read-only binds for system directories (
/usr,/bin,/lib,/etc/ssl, etc.) /proc,/dev, and a tmpfs/tmp- User-specified mounts (read-only or writable)
- Optional network access via
--share-net
Project details
Verified details
These details have been verified by PyPIProject links
GitHub Statistics
Maintainers
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file docketeer_bubblewrap-0.0.14.tar.gz.
File metadata
- Download URL: docketeer_bubblewrap-0.0.14.tar.gz
- Upload date:
- Size: 8.3 kB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/6.1.0 CPython/3.13.7
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
3f2cbcba7a307307218d8006180a957fa2ff7ca9ba21dec3b34c4b675d3db17a
|
|
| MD5 |
02ae8aae44b0ffe434f3b6a1adcaf23c
|
|
| BLAKE2b-256 |
ec8bb31d8f0f20b5fb9b1f376ea32ba495aa46b121836c1fd26b695dea7d85d6
|
Provenance
The following attestation bundles were made for docketeer_bubblewrap-0.0.14.tar.gz:
Publisher:
publish.yml on chrisguidry/docketeer
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
docketeer_bubblewrap-0.0.14.tar.gz -
Subject digest:
3f2cbcba7a307307218d8006180a957fa2ff7ca9ba21dec3b34c4b675d3db17a - Sigstore transparency entry: 975803203
- Sigstore integration time:
-
Permalink:
chrisguidry/docketeer@a7e82cbb33e9ede585d5573fc50e41ff270fb36c -
Branch / Tag:
refs/tags/0.0.14 - Owner: https://github.com/chrisguidry
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish.yml@a7e82cbb33e9ede585d5573fc50e41ff270fb36c -
Trigger Event:
release
-
Statement type:
File details
Details for the file docketeer_bubblewrap-0.0.14-py3-none-any.whl.
File metadata
- Download URL: docketeer_bubblewrap-0.0.14-py3-none-any.whl
- Upload date:
- Size: 5.5 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/6.1.0 CPython/3.13.7
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
21dc13bda4bb2c92f92263031980c93e16a74d0f2c96b8bc21d129cd4292b60d
|
|
| MD5 |
7d9bfa17a48076da1f8a4642f0df7e9d
|
|
| BLAKE2b-256 |
ec3ff928bae00b0056815320088f1582f02915b9826bb27335b66d25a4cb91a5
|
Provenance
The following attestation bundles were made for docketeer_bubblewrap-0.0.14-py3-none-any.whl:
Publisher:
publish.yml on chrisguidry/docketeer
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
docketeer_bubblewrap-0.0.14-py3-none-any.whl -
Subject digest:
21dc13bda4bb2c92f92263031980c93e16a74d0f2c96b8bc21d129cd4292b60d - Sigstore transparency entry: 975803207
- Sigstore integration time:
-
Permalink:
chrisguidry/docketeer@a7e82cbb33e9ede585d5573fc50e41ff270fb36c -
Branch / Tag:
refs/tags/0.0.14 - Owner: https://github.com/chrisguidry
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish.yml@a7e82cbb33e9ede585d5573fc50e41ff270fb36c -
Trigger Event:
release
-
Statement type:
