Simple Container implementation using linux namespaces and cgroups.

[POC] Rootless Containers without `/etc/subuid` and `/etc/subgid`

Reliably reap, restrict and isolate system tasks: Stdio is a control plane for processes

OpenSSH with Linux namespace support

Generate runlets from containerized Unix processes

Linux containers for Android

⚠️ OLD EXPERIMENT I used to learn Rust and linux namespaces ⚠️ A port of the excellent process isolation library NsJail to rust with experimental features to decrease the startup latency further

A lightweight process isolation tool, requiring absolutely no privileges to run

A minimal sandboxing tool

Container implementation in go

Builds, boots and runs linux images on bare metal or inside VMs

Python library to control Linux kernel namespaces

this is a basic container from scracth

Sandbox for multi-process applications for unprivileged users on Linux

A C++ library that helps in developing Linux applications.

Legacy NixOS FHS compatibility sandbox powered by user_namespaces(7)

A repository to hold code for security related examples

Easy Application Sandboxing

A minimal rootless container runtime on Linux