1.google / nsjail
A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.
+309 stars
from 3,871 · score 5.74
Ranked by Attention Score: stars gained over the last 180 complete days
3 repositories by Attention Score · May 7, 2026 – Nov 2, 2026 (UTC)
A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.
A basic user tool to execute simple docker containers in batch or interactive systems without root privileges.
A lightweight, flexible, and safer alternative to chroot and/or Docker.