https://linux.meerstory.com/categories/security/Recent content in Security on MeerStoryHugoen-usWed, 14 Oct 2026 02:07:36 +0900https://linux.meerstory.com/ubuntu/20261014_020655_68/Wed, 14 Oct 2026 02:07:36 +0900https://linux.meerstory.com/ubuntu/20261014_020655_68/<h2 id="overview">Overview</h2> <p>Bubblewrap (<code>bwrap</code>) is a lightweight sandboxing tool that allows unprivileged users to construct hardened containment boundaries across filesystems, networks, and process trees without requiring root privileges. In this walkthrough on Ubuntu 24.04, we explore how to install <code>bubblewrap</code>, configure fundamental isolation primitives, and inspect the core Linux namespace mechanics that power modern application isolation.</p> <h2 id="1-installing-bubblewrap-and-spawning-a-minimal-isolated-shell">1. Installing Bubblewrap and Spawning a Minimal Isolated Shell</h2> <p>To assemble a secure, low-overhead sandbox environment, begin by installing the <code>bubblewrap</code> package from the official repositories.</p>https://linux.meerstory.com/ubuntu/20261011_012642_32/Sun, 11 Oct 2026 01:27:18 +0900https://linux.meerstory.com/ubuntu/20261011_012642_32/<h2 id="overview">Overview</h2> <p>Whenever systems change, security standards evolve, or user account layouts get reorganized on a Linux server, relocating existing GnuPG keyrings and configurations becomes a critical maintenance task. Manually copying files often leads to broken paths or permission nightmares. The <code>addgnupghome</code> utility streamlines this transition by setting up and transforming target GnuPG home directory structures safely. This tutorial breaks down how <code>addgnupghome</code> operates under the hood, walking through a full staging workflow to migrate, inspect, and secure cryptographic key stores.</p>