Build tool for Arch Linux providing control, review and jailed build options

The low-level linux containers creation library for rust

A high-performance, minimalistic container engine in Rust.

Cost saving K8s controller to scale down and up of resources during non-business hours

Daemonless Linux container runtime with a Lisp scripting interface — security-by-default, library API, full networking stack, OCI images, and multi-service orchestration

A lightweight, secure container runtime written in Rust that leverages Linux Namespaces and Cgroups to achieve strict process isolation

A command-line tool to restrict resource usage of other programs.

Rust-based simple container runtime

Daemon-less, sovereign container runtime written in Rust. Zero daemon, native .ctst composition language, eBPF observability, air-gap ready. A next-generation alternative to Docker for security-critical infrastructure.

Supply chain security for Claude Code — sandbox sessions, attest every action, verify provenance

A Rust service which runs arbitrary Linux commands submitted by clients. Isolation is provided using namespaces and cgroups.

Proclet is an open-source sandboxing tool that gives you fast, minimal process isolation on Linux.

A small example showing how to launch a process in a namespaced chroot.