I installed Fedora Kinoite 43 a month ago and want to install the Brave browser. Now I want to install Brave in a sandbox (Podman, Docker, or Bubblewrap) for security reasons, because I read somewhere that it’s better not to install a browser using Flatpak. I know how to put Brave in a sandbox, but my wife also uses the computer, and she’s not very good with the terminal. Is there a way to launch Brave in the sandbox, for example, via a desktop icon? Thanks in advance!
Firefox, for example, already has it’s own sandboxing. That is why it is better than Flatpak.
I don’t know about Brave, but I suspect it would be similar to FIrefox, in that it is already sandboxing processes, so you don’t need to.
From what I understand, in case of browsers, tab isolation is generally better implemented natively, than as Flatpaks. I am not sure though if running Brave in a container would give you the benefits expected.
I know some browsers are trying to solve the Flatpak sandbox issue. Others (e.g. Epiphany, IIUC) have already done it. Personally, I am using Firefox on Silverblue as Flatpak from Flathub.
However, if you’d like to use Brave in a container, Distrobox has a nice distrobox-export command which exports the app to the host system.
If you’d like to use Toolbx though, since it comes preinstalled on Fedora, you’d need to create a desktop file on the host system, using as Exec command something like this:
Exec=toolbox run -c fedora-toolbox-43 brave
Your custom sandbox is unlikely to be better than what’s done by Flatpak. If you don’t want to use the Flatpak because of the sandboxing concerns then you should install and run the browser on the host directly so that it can create its own sandbox.