Linux Namespaces GitHub Repositories

A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.

Judging daemon for programming contests

Easy Application Sandboxing on NixOS

Process isolation for Linux using namespaces, resource limits, cgroups, landlock and seccomp.

StemJail: Dynamic Role Compartmentalization

Control plane for system processes

An Erlang library for managing Unix processes

Understand how linux containers works with practical examples

Joblet is a micro-container runtime for running Linux jobs with: Process and filesystem isolation (PID namespace, chroot) Fine-grained CPU, memory, and IO throttling (cgroups v2) Secure job execution with mTLS and RBAC Built-in scheduler, SSE log streaming, and multi-core pinning Ideal for: Agentic AI Workloads (Untrusted code)

A lightweight process isolation tool, requiring absolutely no privileges to run

A GNU/Linux specific toolkit for making and managing jails which are OS level virtualization containers. Implemented using shell scripts with chroot, linux namespaces, pivot_root and embedded into busybox.

A minimal sandboxing tool

Python library to control Linux kernel namespaces

Reliably reap, restrict and isolate system tasks: Stdio is a control plane for processes

Command line app that lets you play games in a restricted environment by blocking access to system and network resources. It helps enhancing your privacy and security.

Example programs and articles to study Linux namespaces

A chroot jail for online judge

A Minimal Container Runtime - built for anyone who wants to learn how low-level container runtimes like runc work under the hood. Simple, educational, and minimal by design.

A minimal rootless container runtime on Linux