A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.

Stars3,933

Forks330

Last commit2 days ago

singularity

Singularity has been renamed to Apptainer as part of us moving the project to the Linux Foundation. This repo has been persisted as a snapshot right before the changes.

Stars2,613

Forks425

Last commit3 years ago

Lxroot

A lightweight, flexible, and safer alternative to chroot and/or Docker.

Stars120

Forks9

Last commit1 year ago