There are 4 repositories under linux-namespaces topic.
A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.
Jail-shell is a linux security tool mainly using chroot, namespaces technologies, limiting users to perform specific commands, and access sepcific directories.
Understand how linux containers works with practical examples
A GNU/Linux specific toolkit for making and managing jails which are OS level virtualization containers. Implemented using shell scripts with chroot, linux namespaces, pivot_root and embedded into busybox.
Example programs and articles to study Linux namespaces
Reliably reap, restrict and isolate system tasks: Stdio is a control plane for processes
Python library to control Linux kernel namespaces
haskell library to work with linux namespaces
Builds, boots and runs linux images on bare metal or inside VMs
this is a basic container from scracth
Sandbox for multi-process applications for unprivileged users on Linux
Linux containers for Android
[POC] Rootless Containers without `/etc/subuid` and `/etc/subgid`
:warning: OLD EXPERIMENT I used to learn Rust and linux namespaces :warning: A port of the excellent process isolation library NsJail to rust with experimental features to decrease the startup latency further
Simple Container implementation using linux namespaces and cgroups.
A repository to hold code for security related examples