firejail

Securely sandboxes processes to containers using built-in Linux capabilities. More information: <https://manned.org/firejail>.

Install

All systems
curl cmd.cat/firejail.sh
Debian Debian
apt-get install firejail
Ubuntu
apt-get install firejail
Alpine
apk add firejail
Arch Arch Linux
pacman -S firejail
image/svg+xml Kali Linux
apt-get install firejail
Fedora
dnf install firejail
Windows (WSL2)
sudo apt-get update sudo apt-get install firejail
Raspbian
apt-get install firejail
Dockerfile
dockerfile.run/firejail
Docker
docker run cmd.cat/firejail firejail powered by Commando

Securely sandboxes processes to containers using built-in Linux capabilities. More information: <https://manned.org/firejail>.

  • Integrate firejail with your desktop environment:
    sudo firecfg
  • Open a restricted Mozilla Firefox:
    firejail firefox
  • Start a restricted Apache server on a known interface and address:
    firejail --net=eth0 --ip=192.168.1.244 /etc/init.d/apache2 start
  • List running sandboxes:
    firejail --list
  • List network activity from running sandboxes:
    firejail --netstats
  • Shutdown a running sandbox:
    firejail --shutdown=7777

© tl;dr; authors and contributors