A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.
-
Updated
Aug 25, 2026 - C++
#
linux-namespaces
Here are 63 public repositories matching this topic...
A fast, rootless sandbox and virtual resource runtime for any workload, including untrusted and AI-generated code. Daemonless: a real, kernel-enforced container in ~3.5 ms from an OCI image, no daemon, one 1.52 MB static binary.
linux docker rust containers sandbox virtualization oci cgroups seccomp linux-namespaces code-execution overlayfs ai-agents container-runtime oci-runtime rootless podman daemonless code-interpreter docker-alternative
-
Updated
Aug 25, 2026 - Rust
Jail-shell is a linux security tool mainly using chroot, namespaces technologies, limiting users to perform specific commands, and access sepcific directories.
-
Updated
Dec 8, 2022 - C
Easy Application Sandboxing on NixOS
linux nix nixos sandbox namespaces linux-namespaces nixos-configuration bubblewrap nix-flake bubblewrap-scripts
-
Updated
Aug 5, 2026 - Nix
Judging daemon for programming contests
-
Updated
Sep 9, 2024 - Python
Works with Linux namespaces througth glibc with pure python
-
Updated
Mar 5, 2018 - Python
Process isolation for Linux using namespaces, resource limits, cgroups, landlock and seccomp.
linux rust security containers sandbox process sandboxing cgroups chroot seccomp linux-namespaces unshare rootless-containers landlock
-
Updated
Aug 23, 2026 - Rust
StemJail: Dynamic Role Compartmentalization
-
Updated
Oct 1, 2016 - Rust
Control plane for system processes
-
Updated
Jan 16, 2026 - C
An Erlang library for managing Unix processes
fork supervisor capsicum signal system-programming seccomp prctl exec linux-namespaces pledge procctl
-
Updated
Jan 25, 2026 - Erlang
Understand how linux containers works with practical examples
-
Updated
Apr 24, 2021 - Shell
Joblet is a micro-container runtime for running Linux jobs with: Process and filesystem isolation (PID namespace, chroot) Fine-grained CPU, memory, and IO throttling (cgroups v2) Secure job execution with mTLS and RBAC Built-in scheduler, SSE log streaming, and multi-core pinning Ideal for: Agentic AI Workloads (Untrusted code)
linux golang system process-isolation cgroups namespaces resource-management linux-namespaces containerization system-call-isolation
-
Updated
Aug 1, 2026 - Go
A lightweight process isolation tool, requiring absolutely no privileges to run
-
Updated
Dec 27, 2019 - C
A GNU/Linux specific toolkit for making and managing jails which are OS level virtualization containers. Implemented using shell scripts with chroot, linux namespaces, pivot_root and embedded into busybox.
linux shell bash containers virtualization dash jails busybox chroot namespaces linux-namespaces busybox-ash pivot-root
-
Updated
Nov 5, 2025 - Shell
Python library to control Linux kernel namespaces
-
Updated
Nov 8, 2025 - Python
Command line app that lets you play games in a restricted environment by blocking access to system and network resources. It helps enhancing your privacy and security.
linux security steam privacy gaming archlinux containers sandbox telemetry steam-games proton cgroups chroot wine linux-namespaces data-protection security-tools bwrap bottles gaming-tools
-
Updated
May 8, 2026 - Rust
Example programs and articles to study Linux namespaces
-
Updated
Jul 1, 2022 - C
Improve this page
Add a description, image, and links to the linux-namespaces topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the linux-namespaces topic, visit your repo's landing page and select "manage topics."