Process isolation for Linux using namespaces, resource limits, landlock and seccomp.

StemJail: Dynamic Role Compartmentalization

Command line app that lets you play games in a restricted environment by blocking access to system and network resources. It helps enhancing your privacy and security.

TIO Runtime

[POC] Rootless Containers without `/etc/subuid` and `/etc/subgid`

Low-level Lightweight Process Sandbox for Linux [WIP]

⚠️ OLD EXPERIMENT I used to learn Rust and linux namespaces ⚠️ A port of the excellent process isolation library NsJail to rust with experimental features to decrease the startup latency further