1 Repo
Implementations of kernel interfaces running in userspace to isolate application workloads.
Distinct from Kernel Isolation Primitives: Distinct from Kernel Isolation Primitives: focuses on the userspace reimplementation of the kernel interface itself, not just the primitives used for isolation.
Explore 1 awesome GitHub repository matching devops & infrastructure · Userspace Kernels. Refine with filters or upvote what's useful.
This project is a secure container runtime that provides strong isolation for application workloads by implementing a userspace kernel. By intercepting system calls and executing them within a memory-safe, restricted environment, it minimizes the attack surface exposed to the host kernel. It functions as a drop-in engine for standard container orchestration platforms, ensuring compatibility with industry-standard runtime specifications while maintaining a hardened execution boundary. The runtime distinguishes itself through its ability to virtualize core system resources, including an indepen
Implements a userspace kernel to intercept system calls and isolate application workloads from the host kernel.