{"record":{"id":"97096bf481a207ce","repo":"tinyhumansai/openhuman","slug":"bubblewrap-not-found","errorCode":null,"errorMessage":"Bubblewrap not found","messagePattern":"Bubblewrap not found","errorType":"exception","errorClass":"io::Error","httpStatus":null,"severity":"error","filePath":"src/openhuman/security/bubblewrap.rs","lineNumber":15,"sourceCode":"//! Bubblewrap sandbox (user namespaces for Linux/macOS)\n\nuse crate::openhuman::security::traits::Sandbox;\nuse std::process::Command;\n\n/// Bubblewrap sandbox backend\n#[derive(Debug, Clone, Default)]\npub struct BubblewrapSandbox;\n\nimpl BubblewrapSandbox {\n    pub fn new() -> std::io::Result<Self> {\n        if Self::is_installed() {\n            Ok(Self)\n        } else {\n            Err(std::io::Error::new(\n                std::io::ErrorKind::NotFound,\n                \"Bubblewrap not found\",\n            ))\n        }\n    }\n\n    pub fn probe() -> std::io::Result<Self> {\n        Self::new()\n    }\n\n    fn is_installed() -> bool {\n        Command::new(\"bwrap\")\n            .arg(\"--version\")\n            .output()\n            .map(|o| o.status.success())\n            .unwrap_or(false)\n    }\n}","sourceCodeStart":1,"sourceCodeEnd":33,"githubUrl":"https://github.com/tinyhumansai/openhuman/blob/749120085864ce16e0f273c7b86fac7740b39c5b/src/openhuman/security/bubblewrap.rs#L1-L33","documentation":"Constructor guard in BubblewrapSandbox::new(): is_installed() probes for the `bwrap` binary (e.g. via `Command::new(\"bwrap\")` version check) and this error is returned when the probe fails, meaning the bubblewrap user-space sandbox backend cannot be used on this machine because the executable is not on PATH.","triggerScenarios":"Thrown at src/openhuman/security/bubblewrap.rs:15 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Install bubblewrap via the system package manager (apt install bubblewrap, dnf install bubblewrap, pacman -S bubblewrap)","Verify `bwrap --version` succeeds in the same environment the core runs in","Configure the agent/host to use a different sandbox backend (Docker, landlock, or noop) via sandbox_mode"],"exampleFix":null,"handlingStrategy":"fallback","validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"749120085864ce16e0f273c7b86fac7740b39c5b","analyzedAt":"2026-08-17T21:21:45.363Z","contentChangedAt":null,"schemaVersion":2},"datasetVersion":"2026-09-14T00:17:10.932Z"}