Grates Implementation Tracker

[stupendoussuperpowers]

This is a progress tracker for example grates from the wishlist on Lind-Project/lind-wasm#65

Basic Examples

• geteuid grate (C) Add a basic README + geteuid_grate example for documentation #3
• geteuid grate (Rust) Add Rust geteuid-grate implementation #8

Filesystems

• In-Memory Filesystem (C): Add Example Grate: In Memory File System #4 @stupendoussuperpowers
• In-Memory Filesystem (Rust + fdtables)
• chroot Chroot Grate #9
• /dev/null /dev/null grate #25
• /tmp: Virtualized /tmp directories
• FS Namespaces Filesystem Namespace Grate #7
• FS Caching
• Network File System

Tracing and IPC

• In-Memory IPC
• Syscall Tracing (strace) (C): add C strace-grate #24
• strace (Rust): add strace rust grate #17

Sandboxing

• Syscall whitelists (seccomp)
• Dynamic seccomp policies

Networking

• mTLS
• TLS proxy

Input Validation

• Malicious input detection (e.g. blocking zero-day triggers)
• AV-style scanning and sanitization

---

If you're working on any of these grates (or a new grate not listed here), please create a sub-issue describing the expected features, scope of implementation, and any relevant context.