It works with Docker. If you write a Dockerfile for a program, and create a permissions.json file, then your program will work with subuser. Subuser is a &quot;very thin layer&quot; that makes it easier to use Docker for desktop apps.