first commit

profiles/desktop/.config/ranger/preview_sandbox.sh

@@ -0,0 +1,22 @@
+#!/usr/bin/env bash
+set -euo pipefail
+(
+    exec bwrap \
+     --ro-bind /usr/bin /usr/bin \
+     --ro-bind /usr/share/ /usr/share/ \
+     --ro-bind /usr/lib /usr/lib \
+     --ro-bind /usr/lib64 /usr/lib64 \
+     --symlink /usr/bin /bin \
+     --symlink /usr/bin /sbin \
+     --symlink /usr/lib /lib \
+     --symlink /usr/lib64 /lib64 \
+     --proc /proc \
+     --dev /dev \
+     --ro-bind /etc /etc \
+     --ro-bind ~/.config ~/.config \
+     --ro-bind ~/.cache ~/.cache \
+     --ro-bind "$PWD" "$PWD" \
+     --unshare-all \
+     --new-session \
+     bash ~/.config/ranger/scope.sh "$@"
+)