minor fixes

profiles/evince

@@ -13,7 +13,7 @@ set -euo pipefail
      --ro-bind /run/user/"$(id -u)"/"$WAYLAND_DISPLAY" /run/user/"$(id -u)"/"$WAYLAND_DISPLAY" \
      --ro-bind-try ~/.cache/fontconfig ~/.cache/fontconfig \
      --ro-bind-try ~/.config/evince ~/.config/evince \
-     --ro-bind-try "${@: -1}" "${@: -1}" \
+     --ro-bind-try "${@: -1}" "$(realpath "${@: -1}")" \
      --unshare-all \
      --new-session \
      --seccomp 10 \

profiles/imv

@@ -11,7 +11,7 @@ set -euo pipefail
      --dev /dev \
      --ro-bind /run/user/"$(id -u)"/"$WAYLAND_DISPLAY" /run/user/"$(id -u)"/"$WAYLAND_DISPLAY" \
      --ro-bind-try ~/.config/imv/ ~/.config/imv/ \
-     --ro-bind-try "${@: -1}" "${@: -1}" \
+     --ro-bind-try "${@: -1}" "$(realpath "${@: -1}")" \
      --unshare-user \
      --unshare-pid \
      --unshare-net \

profiles/libreoffice

@@ -15,7 +15,7 @@ set -euo pipefail
      --ro-bind /run/user/"$(id -u)"/"$WAYLAND_DISPLAY" /run/user/"$(id -u)"/"$WAYLAND_DISPLAY" \
      --bind-try ~/.cache/fontconfig ~/.cache/fontconfig \
      --bind-try ~/.config/libreoffice ~/.config/libreoffice \
-     --bind-try "${@: -1}" "${@: -1}" \
+     --bind-try "${@: -1}" "$(realpath "${@: -1}")" \
      --unshare-all \
      --new-session \
      --seccomp 10 \

profiles/mpv

@@ -0,0 +1,26 @@
+#!/usr/bin/env bash
+set -euo pipefail
+(
+    exec bwrap \
+     --ro-bind /usr/bin/ /usr/bin/ \
+     --ro-bind /usr/share /usr/share \
+     --ro-bind /usr/lib /usr/lib \
+     --ro-bind /usr/lib64 /usr/lib64 \
+     --symlink /usr/lib64 /lib64 \
+     --symlink /usr/bin /bin \
+     --dev /dev \
+     --proc /proc \
+     --ro-bind /run/user/"$(id -u)"/"$WAYLAND_DISPLAY" /run/user/"$(id -u)"/"$WAYLAND_DISPLAY" \
+     --ro-bind-try /run/user/"$(id -u)"/pipewire-0 /run/user/"$(id -u)"/pipewire-0 \
+     --ro-bind /etc /etc \
+     --ro-bind-try ~/.config/mpv ~/.config/mpv \
+     --ro-bind-try "${@: -1}" "$(realpath "${@: -1}")" \
+     --unsetenv DBUS_SESSION_BUS_ADDRESS \
+     --unshare-all \
+     --seccomp 10 \
+     --new-session \
+     10< /usr/local/bin/seccomp_default_filter.bpf \
+     /usr/bin/mpv --no-terminal "$@"
+)
+
+## remove --no-session if you want terminal control in mpv

profiles/vlc

@@ -13,7 +13,7 @@ set -euo pipefail
      --ro-bind-try /run/user/"$(id -u)"/pipewire-0 /run/user/"$(id -u)"/pipewire-0 \
      --ro-bind /etc /etc \
      --ro-bind-try ~/.config/vlc ~/.config/vlc \
-     --ro-bind-try "${@: -1}" "${@: -1}" \
+     --ro-bind-try "${@: -1}" "$(realpath "${@: -1}")" \
      --unsetenv DBUS_SESSION_BUS_ADDRESS \
      --unshare-user-try \
      --unshare-pid \

profiles/zathura

@@ -12,13 +12,13 @@ set -euo pipefail
      --ro-bind /etc/fonts /etc/fonts \
      --ro-bind-try ~/.config/zathura ~/.config/zathura \
      --ro-bind-try ~/.cache/fontconfig ~/.cache/fontconfig \
-     --ro-bind-try "${@: -1}" "${@: -1}" \
+     --ro-bind-try "${@: -1}" "$(realpath "${@: -1}")" \
      --unsetenv DBUS_SESSION_BUS_ADDRESS \
      --unshare-all \
      --new-session \
      --seccomp 10 \
      10< /usr/local/bin/seccomp_default_filter.bpf \
-     /usr/bin/zathura --config-dir=~/.config/zathura/ "$@"
+     /usr/bin/zathura "$@"
 )