[Question] ro-bind a single file

[ghost]

When opening a media file with a media player, is there a way to script bwrap to have the media player be blind to the entire filesystem except for that one single file?

The documentation doesn't seem to make it clear how to do that.

The naive solution to this problem would involve file copying which isn't good - huge latency and ssd wear & tear.

[charmander]

--ro-bind path/to/file /where/to/mount/it

[TingPing]

While that certainly works you are probably better off using a solution like flatpak which handles dynamically adding files into the sandbox for you.