Linux Sandbox

sandbox.txt

sandbox() {
  local name="${1:?Usage: sandbox <name>}"
  local workspace="$HOME/workspace/$name"

  bwrap \
    --ro-bind / / \
    --bind "$workspace" "$workspace" \
    --dev /dev \
    --proc /proc \
    --tmpfs /tmp \
    --unshare-pid \
    --unshare-ipc \
    --unshare-uts \
    --die-with-parent \
    bash --rcfile "$HOME/.bashrc"
}