2 个仓库
Writable in-memory overlays over read-only base filesystems that isolate modifications from the original data.
Distinct from Copy-on-Write Filesystems: Distinct from Copy-on-Write Filesystems: focuses on in-memory overlay layers for sandboxing, not block-level copy-on-write allocation.
Explore 2 awesome GitHub repositories matching operating systems & systems programming · In-Memory Overlay Layers. Refine with filters or upvote what's useful.
Afero is a Go library that provides a unified filesystem abstraction, allowing applications to interact with local disk, in-memory storage, cloud services, archives, and remote systems through a single, consistent interface. At its core, it defines a standard interface that all filesystem backends implement, enabling developers to swap storage implementations without changing application code. The library distinguishes itself through its composable architecture, which includes layered filesystem composition for creating cached, sandboxed, or restricted storage views. It offers a copy-on-write
Layers a writable in-memory overlay over a read-only base so modifications are isolated from the original filesystem.
RootlessKit is a tool for running container workloads and isolated process trees securely as a standard non-privileged user without holding root access on the host. It creates unprivileged user and mount namespaces to simulate fake root execution environments, allowing users to execute container workloads and manage resource groups safely. The project provides capabilities for rootless port forwarding and unprivileged network namespace isolation, routing container network traffic through user-mode packet translation without requiring privileged kernel setup. It includes multiple backend netwo
Isolates modifications from original data using writable overlays over read-only base filesystems.