Bubblewrap Without the Pain

Bubblewrap is the sandboxing technology behind Flatpak. It uses Linux namespaces to isolate processes from the rest of your system - limiting filesystem access, network capabilities, and more. It&rsquo;s powerful stuff. The problem is that actually using it requires memorizing dozens of flags and getting the incantation exactly right. One wrong flag and your sandbox either doesn&rsquo;t work or is…