RootlessKit is a tool for running container workloads and isolated process trees securely as a standard non-privileged user without holding root access on the host. It creates unprivileged user and mount namespaces to simulate fake root execution environments, allowing users to execute container workloads and manage resource groups safely. The project provides capabilities for rootless port forwarding and unprivileged network namespace isolation, routing container network traffic through user-mode packet translation without requiring privileged kernel setup. It includes multiple backend netwo
Moby is an OCI container engine and runtime manager designed for building, running, and managing isolated containers based on Open Container Initiative standards. It functions as a container daemon and image builder, providing a core engine to orchestrate the full lifecycle of containers and the packaging of source code into portable images. The project provides a standardized HTTP interface that allows for programmatic container management, enabling external clients to control daemon settings and container operations. It supports a rootless security model, allowing the engine daemon to execu
Works with Linux namespaces througth glibc with pure python
The main features of friz-zy/pyspaces are: Namespace and Process Utilities.
Open-source alternatives to friz-zy/pyspaces include: rootless-containers/rootlesskit — RootlessKit is a tool for running container workloads and isolated process trees securely as a standard non-privileged… moby/moby — Moby is an OCI container engine and runtime manager designed for building, running, and managing isolated containers… zalando/python-nsenter — NSEnter.