google/nsjail
View on GitHub ↗ ★ 4,181 C++
A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.
12 mentions on Hacker News by 9 people: 0 stories, 12 comments · first 2015-08-10 · latest 2025-09-17
20082026
Nothing here.