Skip to content

Instantly share code, notes, and snippets.

@jdmichaud
Last active August 7, 2024 13:53
Show Gist options
  • Save jdmichaud/6d51b3b26269c411aa8f473736048d3c to your computer and use it in GitHub Desktop.
Save jdmichaud/6d51b3b26269c411aa8f473736048d3c to your computer and use it in GitHub Desktop.
Jail

Launch a process without networking:

unshare -n --map-user=$(id -u) --map-group=$(id -g) curl www.google.com

⚠️ Firejail is complex, buggy and behaves in unexpected ways. AVOID !

Launch a program with /some/path as you home folder:

firejail --private=/some/path/ your_program your program arguments

wine

firejail --profile=wine --private=/tmp/wine/ wine <...>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment