Runs untrusted code and survives it. No Docker, no root, no VM.
-
Updated
Sep 11, 2026 - JavaScript
Runs untrusted code and survives it. No Docker, no root, no VM.
Parse container info from cgroups file
Live per-container HTTP dashboard read from the kernel with eBPF. Rate, errors, latency. No sidecar, no app changes.
A system layer for AI agents: kernel-enforced reversibility, a signed append-only journal, forkable time, and a context pager that survives compaction.
developing docker runtime from scratch to understand how docker isolation process work under the hood
High-performance, multi-tenant Remote Code Execution (RCE) engine and dark-mode Monaco IDE with Linux cgroup sandboxing, Redis distributed queue, and sub-second execution across 6 languages.
To associate your repository with the cgroups topic, visit your repo's landing page and select "manage topics."