Subuser

Bubblewrap

Low-level unprivileged sandboxing tool used by Flatpak and similar projects

NsJail

A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.

singularity

Singularity has been renamed to Apptainer as part of us moving the project to the Linux Foundation. This repo has been persisted as a snapshot right before the changes.

Preevy

Quickly deploy preview environments to the cloud!