How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
Linux process isolation tool using namespaces, resource limits, and seccomp-bpf syscall filters.
lxroot is a lightweight and safe alternative to chroot, Docker, and other software virtualization tools.
Bubblewrap is an unprivileged sandbox execution utility for Linux that isolates processes from the host system. It creates secure environments by leveraging Linux namespaces to separate system resources, including network, PID, and IPC stacks. The project distinguishes itself by enabling the execution of untrusted software without requiring root privileges on the host machine. It prevents privilege escalation by disabling the execution of setuid binaries and uses user identity mapping to isolate process permissions from the host operating system. The tool manages a comprehensive security sur
Run programs on linux with selectively restricted permissions.
Guidelines for Contributing - Pull Request Template - Project License - Documentation - Community Meetings / Minutes / Roadmap - Support - Citation
The main features of singularityware/singularity are: Sandboxing and Isolation.
Projects with overlapping indexed features include: google/nsjail — Linux process isolation tool using namespaces, resource limits, and seccomp-bpf syscall filters. parke/lxroot — lxroot is a lightweight and safe alternative to chroot, Docker, and other software virtualization tools. projectatomic/bubblewrap — Bubblewrap is an unprivileged sandbox execution utility for Linux that isolates processes from the host system. It… subuser-security/subuser — Run programs on linux with selectively restricted permissions.