nsjail by google

A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.

created at May 14, 2015, 9:42 p.m.

C++

89 +1

2,964 +6

275 +0

GitHub
lmctfy by google

lmctfy is the open source version of Google’s container stack, which provides Linux application containers.

created at Sept. 16, 2013, 4:28 p.m.

C++

247 -1

3,412 +0

238 +0

GitHub
porto by yandex

Yet another Linux container management system

created at Aug. 27, 2015, 7:39 a.m.

C++

44 +0

398 -1

52 +0

GitHub
lxroot by parke

A lightweight, flexible, and safer alternative to chroot and/or Docker.

created at Feb. 2, 2020, 1:52 a.m.

C++

9 +0

99 +0

9 +0

GitHub