Bubblewrap is an open-source Linux sandboxing utility that uses user namespaces to run commands in a minimal, isolated container. It is widely used by projects like Flatpak and other tools that require per-process containment and tighter security boundaries.