Alter Ego: run Linux desktop applications under a different local user

ForkFS allows you to sandbox a process's changes to your file system.

A tool for running an application in an isolated network namespace, with external network access only through a SOCKS proxy.

Parallel, isolated dev environments for humans and AI coding agents. Real containers. Real databases. Zero collisions.

为 Linux QQ 提供基本的存储隔离，同时集成一些其它小功能

Run untrusted Python code safely with native Linux isolation. No containers needed.

Hacks helping with semi-almost-usable declarative NixOS sandboxing

Run windows applications in AppContainer sandbox

launches and assigns programs to cgroup-specific iptables-rules

Edera Runtime Class Mutating Webhook

Experimental process isolation written in Rust

Automatically patch dockerd to use process isolation mode (it's better and faster)

Safely Inspect Untrusted Code

Proclet is an open-source sandboxing tool that gives you fast, minimal process isolation on Linux.

A blazing fast and secure code exection service

Bubbles - lightweight Linux working environments