Sandbox service built on Linux container technologies with simple REST and gRPC API

🚡 Minimal linux container runtime

Sandbox implemented in GO including containers (namespace, cgroup), ptrace, seccomp

Now moved into `github.com/inspektor-gadget/inspektor-gadget/pkg/gadget-collection/gadgets/traceloop`. Tracing system calls in cgroups using BPF and overwritable ring buffers

Judging daemon for programming contests

面向云原生的在线评测系统. Cloud-Native oriented Online Judge system

Native Rust library for managing control groups under Linux

docker相关的各种一键(Various one-click related to docker)通过Docker批量或单独开设NAT服务器(Bulk or individual NAT server provisioning via Docker)

dock try to re-implement docker 🐳

A container engine from scratch in C language, without any LXC or Docker

like cadvisor but simple

Set of scripts to get useful information within docker containers.

Native Rust crate for operating on cgroups.

cgrps is a set of commands for checking cgroups.

simple container implementation in go.

eBPF-based pod-level kernel metrics collector for Kubernetes

eBPF egress firewall for Kubernetes — see and enforce what every pod talks to (domains, HTTP paths, headers, IPs), attributed per pod, enforced in the kernel. No sidecar, no proxy, no TLS MITM.

Islander is a container engine with TLS encryption and support for cloud storage; analog of Docker.

Exporter for grouped process