google/nsjail

A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.

语言：C++ · GitHub 星标：4,180 · Fork：398

话题：chroot · linux · linux-namespaces · process-isolation · seccomp-bpf-policies · security

在 GitHub 上查看原仓库