Bootstrap Kubernetes the hard way on GCP and AWS. No scripts.

A collection of programs used for benchmarking gVisor performance.

CRI-enabled container runtime benchmark suite.

execute and test code of various languages within a sandbox runtime that provides a virtualized container environment.

gvisor sandbox

running an unsecured user code on gVisor in the cloud

A bare minimum Flask app that runs untrusted code in Docker containers using gVisor as the runtime

netcat using netstack userspace library and eBPF

automated "fork" of gVisor that only contains the netstack bits so the go.mod is smaller. maintained by scripts, not humans.

Hardened Docker Traefik V2 service configuration example.

A rule-based transparent proxy for Windows, Linux, macOS

A set of curated exercises to help you prepare for the CKS exam

A modern relational spreadsheet 🌈

gVisor + Falco Poc

Safe VPN over SSH and Gvisor

An easy-to-use netstack, wrapped by gvisor and wireguard-go, which supports macOS/Linux/Windows.

CKA & CKS kubeadm sandbox cluster auto provisioning using AWS & terraform

kubectl-link helps you to access your cluster resources without vpn

Code execution utilities for Open WebUI & Ollama

gvisor+windivert = ok