google/nsjail

A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.

View on GitHub
C++
Stars 4.1k
Forks 372
License Apache-2.0
Open Issues 38
Updated 1d ago