Bubblewrap (/usr/bin/bwrap) is a core execution engine for unprivileged
containers that works as a setuid binary on kernels without
bwrap bwrap is a privileged helper for container setup. You are unlikely to use it directly from the commandline, although that is possible. It works by creating a...