Safely Inspect Untrusted Code

为 Linux QQ 提供基本的存储隔离，同时集成一些其它小功能

Proclet is an open-source sandboxing tool that gives you fast, minimal process isolation on Linux.

A blazing fast and secure code exection service

Experimental process isolation written in Rust

Automatically patch dockerd to use process isolation mode (it's better and faster)

A tool for running an application in an isolated network namespace, with external network access only through a SOCKS proxy.

Run untrusted Python code safely with native Linux isolation. No containers needed.

Parallel, isolated dev environments for humans and AI coding agents. Real containers. Real databases. Zero collisions.

Bubbles - lightweight Linux working environments

launches and assigns programs to cgroup-specific iptables-rules

Hacks helping with semi-almost-usable declarative NixOS sandboxing

Edera Runtime Class Mutating Webhook

Run windows applications in AppContainer sandbox

Alter Ego: run Linux desktop applications under a different local user

ForkFS allows you to sandbox a process's changes to your file system.