Sandbox service built on Linux container technologies with easy REST and gRPC API

Sandbox implemented in GO with container / ptrace / seccomp

Now moved into `github.com/inspektor-gadget/inspektor-gadget/pkg/gadget-collection/gadgets/traceloop`. Tracing system calls in cgroups using BPF and overwritable ring buffers

dock try to re-implement docker 🐳

like cadvisor but simple

cgrps is a set of commands for checking cgroups.

simple container implementation in go.

Exporter for grouped process

An easy-to-use go service resource monitor, support containers.

The system resource restriction utilities, one component of the SonmiHPC system.

mydocker is a docker-like container, just for learning.

Mainly used to collect cpu, memory metrics correctly for container, k8s and non container environment.

Some useful libs in my coding. Now contains cgroup-iolimit lib.

a go library to control cgroup

Kubernetes OOM event monitor

Writing a container in a few lines of Go code