DocBunker

Open untrusted documents in a sandbox. Only pixels reach your machine.

Download · Docs · Build from source

---

What is it?

DocBunker opens PDFs, images and Office files inside a disposable sandbox (gVisor on Linux, QEMU+gVisor on Windows/macOS). The parser runs in an isolated box with no network and no access to your files. Only the rendered pixels come back. When you close it, the sandbox is destroyed.

Supported files

Format	Result
PDF	Rendered pages
PNG, JPEG, WebP	Rendered image
DOCX, PPTX, XLSX	Text preview

No copy-paste or search yet — pixels only, on purpose.

Download

Get the latest from GitHub Releases.

Platform	Requires
Windows 10/11 x64	QEMU
macOS (Apple Silicon)	brew install qemu
Linux x64 / aarch64	QEMU from your package manager

0.1.0 — early days, expect rough edges.

Build from source

Rust 1.85+, Node.js 20+, Tauri 2 prerequisites.

npm --prefix frontend ci && npm --prefix frontend run build
cargo test --workspace

npm --prefix frontend run dev                    # terminal 1
cargo run --manifest-path src-tauri/Cargo.toml   # terminal 2

Debug builds use a fake backend — no QEMU or gVisor needed. Set DOCBUNKER_BACKEND to mock, subprocess, runsc or vm.

Docs

How it works · Architecture · Sandbox · Threat model · Roadmap

Contributing: CONTRIBUTING.md. Security issues: SECURITY.md.

License

MIT. The optional MuPDF feature links AGPL code and stays out of default builds.