I installed Fedora Kinoite 43 a month ago and want to install the Brave browser. Now I want to install Brave in a sandbox (Podman, Docker, or Bubblewrap) for security reasons, because I read somewhere that it’s better not to install a browser using Flatpak. I know how to put Brave in a sandbox, but my wife also uses the computer, and she’s not very good with the terminal. Is there a way to launch Brave in the sandbox, for example, via a desktop icon? Thanks in advance!
Firefox, for example, already has it’s own sandboxing. That is why it is better than Flatpak.
I don’t know about Brave, but I suspect it would be similar to FIrefox, in that it is already sandboxing processes, so you don’t need to.
From what I understand, in case of browsers, tab isolation is generally better implemented natively, than as Flatpaks. I am not sure though if running Brave in a container would give you the benefits expected.
I know some browsers are trying to solve the Flatpak sandbox issue. Others (e.g. Epiphany, IIUC) have already done it. Personally, I am using Firefox on Silverblue as Flatpak from Flathub.
However, if you’d like to use Brave in a container, Distrobox has a nice distrobox-export command which exports the app to the host system.
If you’d like to use Toolbx though, since it comes preinstalled on Fedora, you’d need to create a desktop file on the host system, using as Exec command something like this:
Exec=toolbox run -c fedora-toolbox-43 brave