Awesome GitHub RepositoriesHome Directory Isolation

NodeOS is an operating system that boots a Linux kernel with Node.js running as the primary userspace, replacing traditional shell utilities with JavaScript execution. Every npm package is treated as a native system command, making hundreds of thousands of packages directly executable at the OS level. The operating system is built inside Docker containers using a reproducible pipeline that generates ext2 filesystem images, with the ability to conditionally disable KVM for systems without hardware virtualization. It mounts a persistent usersfs partition for user home directories, preserving ch

Firejail is a Linux application sandbox and kernel security wrapper that isolates untrusted applications from the host system. It uses kernel namespaces and seccomp filters to restrict filesystem access, drop kernel capabilities, and limit the system attack surface. The project is distinguished by its use of predefined security profiles to automatically apply filesystem restrictions and syscall limits based on the executable being launched. It provides specialized isolation for portable packages such as AppImages and implements X11 display isolation via proxy servers to prevent keyboard loggi