--- title: Install App Sandbox Runner on Pop!_OS using the Snap Store | Snapcraft description: Get the latest version of App Sandbox Runner for on Pop!_OS - Run programs in throw-away sandbox profiles with file-change tracking url: https://snapcraft.io/install/app-sandbox-runner/pop --- [Canonical Snapcraft](https://snapcraft.io/) # Install App Sandbox Runner on **Pop!\_OS** # App Sandbox Runner [Nguyen Van Thanh (thanhnv128)](https://snapcraft.io/publisher/thanhnv128 "View all snaps from Nguyen Van Thanh (thanhnv128)") * [Nguyen Van Thanh (thanhnv128)](https://snapcraft.io/publisher/thanhnv128 "View all snaps from Nguyen Van Thanh (thanhnv128)") * [Utilities](https://snapcraft.io/search?categories=utilities) [Install](https://snapcraft.io/install/app-sandbox-runner/pop#install) #### Run programs in throw-away sandbox profiles with file-change tracking App Sandbox Runner is a Linux alternative to Sandboxie-Plus for trying programs and scripts in disposable sandbox profiles and seeing exactly what they changed. What it really does: * Sandbox profiles with a private HOME, XDG config/cache/data/state dirs and TMPDIR under ~/AppSandboxes/, optionally seeded with copies of real-home files * Scrubbed environment (allow-list) so tokens/secrets in your session do not leak * Resource limits via setrlimit: CPU seconds, address space (memory), open files, file size, processes, plus a wall-clock timeout that kills the whole process group * Landlock LSM file rules when the kernel supports them: writes allowed only inside the sandbox folder, optional mode that also hides the real home from reads * Network block via a seccomp-BPF filter (only AF\_UNIX sockets allowed), offered only when the probe shows the filter is really enforced * Full file-change tracking (created / modified / deleted, SHA-256) against the baseline * Recover a sandbox file to its real-home location (existing file is backed up first), delete selected files or wipe the whole sandbox * Run history with exit status / signal, CPU time and peak memory from wait4(), live process tree and output console; capability probe that shows what your kernel allows Honest limitations: this is NOT antivirus-grade isolation. There are no Linux namespaces (user namespaces and bubblewrap are blocked inside a strict snap), no kernel driver and no virtualisation. In "redirect only" mode a program can still write to absolute paths in your home. X11 programs can still see other X11 windows. Programs run inside this app's confinement (core22 runtime tools and executables / AppImages stored in your home folder). The snap "home" interface does not grant access to hidden files/folders directly in your home (e.g. ~/.bashrc, ~/.config), so such paths cannot be seeded into, or recovered from, a sandbox when installed as a snap. Disclaimer: This project is an independent open-source tool and is not affiliated with, sponsored by, or endorsed by Sandboxie-Plus, David Xanatos or Sophos. Support development: ### Package name * app-sandbox-runner --- ### License * MIT --- ### Last updated * Today - latest/stable --- ### Websites * [buymeacoffee.com](https://buymeacoffee.com/thanhnv128b "https://buymeacoffee.com/thanhnv128b") --- ### Contact * [buymeacoffee.com](https://buymeacoffee.com/thanhnv128b "https://buymeacoffee.com/thanhnv128b") --- ##### Report a Snap Store violation * [Report this Snap](https://snapcraft.io/install/app-sandbox-runner/pop#report-snap-modal) --- [See more information about app-sandbox-runner ›](https://snapcraft.io/app-sandbox-runner) ## Enable snaps on Pop!\_OS and install App Sandbox Runner Snaps are applications packaged with all their dependencies to run on all popular Linux distributions from a single build. They update automatically and roll back gracefully. Snaps are discoverable and installable from the [Snap Store](https://snapcraft.io/store), an app store with an audience of millions. ### Enable snapd Snap can be installed on Pop!\_OS from the command line. Open Terminal from the Applications launcher and type the following: ``` sudo apt update sudo apt install snapd ``` Either log out and back in again, or restart your system, to ensure snap’s paths are updated correctly. ### Install App Sandbox Runner To install App Sandbox Runner, simply use the following command: ``` sudo snap install app-sandbox-runner ``` ### Other popular snaps… [See more...](https://snapcraft.io/search?categories=featured) [See more in Featured](https://snapcraft.io/search?categories=featured) ### More things to do… #### [Get the snap store](https://snapcraft.io/snap-store) Browse and find snaps from the convenience of your desktop using the snap store snap. #### [Learn more about snaps](https://snapcraft.io/docs) Interested to find out more about snaps? Want to publish your own application? Visit [snapcraft.io](https://snapcraft.io/) now. [Back to top](https://snapcraft.io/install/app-sandbox-runner/pop) © 2026 Canonical Ltd. Ubuntu and Canonical are registered trademarks of Canonical Ltd. Powered by [Charmed Kubernetes](https://www.ubuntu.com/kubernetes) [Join the forum](https://forum.snapcraft.io/), contribute to or report problems with, [snapd](https://bugs.launchpad.net/snapd), [Snapcraft](https://bugs.launchpad.net/snapcraft), or [this site](https://github.com/canonical/snapcraft.io/issues/new). * [Share on Twitter](https://twitter.com/snapcraftio) * [Share on Facebook](https://www.facebook.com/snapcraftio) * [Share on YouTube](https://www.youtube.com/snapcraftio) * [Terms of Service](https://ubuntu.com/legal/terms-and-policies/snap-store-terms) * [Data privacy](https://www.ubuntu.com/legal/data-privacy) * [Manage your tracker settings](https://snapcraft.io/install/app-sandbox-runner/pop) * [Service status](https://status.snapcraft.io/) * [Other functions](https://dashboard.snapcraft.io/) * [Contact us](https://snapcraft.io/about/contact-us)