The fastest path to AI-powered full stack observability, even for lean teams.

Streaming replication for SQLite.

YugabyteDB - the cloud native distributed SQL database for mission-critical applications.

Linux namespaces and seccomp-bpf sandbox

HAProxy Load Balancer's development branch (mirror of git.haproxy.org)

An extremely low latency KVMFR (KVM FrameRelay) implementation for guests with VGA PCI Passthrough.

eBPF-based Security Observability and Runtime Enforcement

v4l2-loopback device

A fast and lightweight fully featured OCI runtime and C library for running containers

Packet, where are you? -- eBPF-based Linux kernel networking debugger

A next-generation cloud native kernel designed to unlock best-in-class performance, security primitives and efficiency savings.

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF

Get eBPF programs running from the cloud to the kernel in 1 line of bash

Hide a process under Linux using the ld preloader (https://sysdig.com/blog/hiding-linux-processes-for-fun-and-profit/)

Code snippets from the O'Reilly book

The Kubernetes Security Profiles Operator

A novel container runtime, aka confidential container, for cloud-native confidential computing and enclave runtime ecosystem.

Xvisor: eXtensible Versatile hypervISOR

Keystone Enclave (QEMU + HiFive Unleashed)

Talos Linux System Extensions

A dynamic library bundling the guest payload consumed by libkrun

Real-time performance monitoring, done right!