# landrun を Homebrew, Nix でインストール landrun のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。 ## インストール ```sh sudo av install brew:landrun ``` 追加のインストールコマンド: ### macOS - Homebrew (100%): ```sh brew install landrun ``` 証拠: local Homebrew formula metadata ### Linux - Nix (92%): ```sh nix profile install nixpkgs#landrun ``` 証拠: nixpkgs package indexes: pkgs/by-name/la/landrun/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 ## パッケージ情報 - **パッケージキー:** brew:landrun - **パッケージマネージャ:** Homebrew - **パッケージマネージャページ:** - **バージョン:** 0.1.17 - **ソース概要:** Lightweight, secure sandbox for running Linux processes using Landlock LSM - **ホームページ:** - **リポジトリ:** - **ライセンス:** MIT - **ソースアーカイブ:** - **最終更新:** 2026-07-26T13:40:58+02:00 - **生成日時:** 2026-08-04T22:13:35+00:00 ## 実行可能ファイル - landrun (cli) - landrun (エイリアス) ## ビルド依存関係 - go ## インストール挙動 - post-install フック: 未定義 - Bottle: 利用可能 対象 arm64_linux, x86_64_linux ## バージョンと鮮度 - ページ生成日: 2026-08-04 - マネージャ版: 0.1.17 - マネージャ更新日: 2026-07-26 - ローカルデータ: OK - 上流リポジトリ: https://github.com/Zouuup/landrun - 検出された最新: v0.1.17 (最新) ## プロジェクトの歴史と使われ方 Landrun is a small Linux command-line sandbox that wraps the kernel Landlock security module so ordinary users can run a process with explicit filesystem and TCP access rules. ### プロジェクトの歴史 The project appeared publicly in March 2025 with early 0.1.x releases. Its README frames it as a practical front end for Landlock: no root, no containers, no SELinux or AppArmor policy files, and a command-line flag model for read, write, execute, bind, and connect permissions. The early release stream quickly refined the access model. Version 0.1.3, released on 2025-03-22, added a deny-all behavior when no sandbox rules are provided. Version 0.1.4, released on 2025-03-23, replaced a global execution flag with path-specific execution permissions. Version 0.1.10, released on 2025-03-23, expanded Landlock permission coverage and tests, and version 0.1.14, released on 2025-04-03, added helper flags for dynamically linked executables. ### 採用の歴史 Landrun's adoption signal is mainly package-nerd and security-tool visibility rather than a long institutional history. The upstream README lists distro packaging for Arch AUR and SlackBuilds, and the Homebrew formula places it in the macOS/Linux package-manager ecosystem even though the underlying sandbox requires Linux Landlock support. ### 使われ方 Typical usage is to prefix another command with `landrun` and add only the paths and TCP ports that process should access. The README also documents a systemd integration pattern for wrapping services such as nginx with reduced filesystem and network permissions. ### パッケージ好きにとっての重要性 For package collectors, Landrun is notable because it turns a relatively obscure kernel LSM into a normal CLI tool. It sits near tools such as firejail and bubblewrap, but its hook is using unprivileged, kernel-native Landlock rules with a small Go implementation. ### タイムライン - 2025-03-22: v0.1.3 release documented deny-all behavior when no sandbox rules are supplied. - 2025-03-23: v0.1.4 release introduced path-specific execution permissions. - 2025-03-23: v0.1.10 release expanded Landlock permission coverage and test coverage. - 2025-04-03: v0.1.14 release added `--ldd` and `--add-exec` helper flags. ### Related projects - Related projects include the Linux Landlock LSM, the go-landlock bindings used by Landrun, and user-facing Linux sandbox tools such as firejail and bubblewrap. ### ソース - - ## セキュリティノート narrow executable package without higher-risk signals. - **Geiger リスク:** グリーン / 低 - narrow executable package without higher-risk signals ## ソースデータベース詳細 - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** landrun - **Version Scheme:** 0 - **Revision:** 0 - **Requirements:** linux - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** stable ## 他のパッケージマネージャ記録 - Nix - landrun: normalized package name match | nixpkgs package indexes: pkgs/by-name/la/landrun/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 ## 関連リンク - [Source-control packages](https://pkg.so/ja/source-control-tools/) - Belongs to a source-control command family. - [Terminal utility packages](https://pkg.so/ja/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://pkg.so/ja/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Security and crypto packages](https://pkg.so/ja/security-crypto-tools/) - Matched security, identity, cryptography, password, signing, or certificate metadata. - [go](https://pkg.so/ja/brew/go/) - Build dependency declared by Homebrew. - [bubblewrap](https://pkg.so/ja/brew/bubblewrap/) - Shares pkgdb curated category or tags: cli, linux, sandbox, sandboxing, security. - [libseccomp](https://pkg.so/ja/brew/libseccomp/) - Shares pkgdb curated category or tags: cli, linux, sandboxing, security. - [fence](https://pkg.so/ja/brew/fence/) - Shares pkgdb curated category or tags: cli, sandbox, sandboxing, security. - [libcap](https://pkg.so/ja/brew/libcap/) - Shares pkgdb curated category or tags: cli, linux, security. - [linux-pam](https://pkg.so/ja/brew/linux-pam/) - Shares pkgdb curated category or tags: cli, linux, security. - [libcap-ng](https://pkg.so/ja/brew/libcap-ng/) - Shares pkgdb curated category or tags: cli, linux, security. - [vuls](https://pkg.so/ja/brew/vuls/) - Shares pkgdb curated category or tags: cli, linux, security. - [openssl@3](https://pkg.so/ja/brew/openssl-3/) - Shares pkgdb curated category or tags: cli, security. ## Combined YAML source View the package source record on GitHub. [combined/landrun.yml](https://github.com/mxcl/pkgdb/blob/main/combined/landrun.yml) ## ソース - pkg.so package database - Geiger risk classifier - package-page enrichment - curated package history - package version freshness - pkgdb category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph