Slim(toolkit): Don't change anything in your container image and minify it by up to 30x (and for compiled languages even more) making it secure too! (free and open source)
- docker
- containers
- security
- seccomp
47,133 repositories indexed
1–5 of 5 · Most stars
Slim(toolkit): Don't change anything in your container image and minify it by up to 30x (and for compiled languages even more) making it secure too! (free and open source)
Sandstorm is a self-hostable web productivity suite. It's implemented as a security-hardened web app package manager.
A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.
OCI hook to trace syscalls and generate a seccomp profile
🔍 Function-level tracing tool for Seccomp profiling, with eBPF