Simple containers using Linux user namespaces — see also https://github.com/arachsys/ucontain

Start programs inside unshare/lxc namespaces easily using UNIX sockets + easy access to capabilities, namespaces, chroot and others.

Painless Linux sandboxing API

Substitutes a directory elsewhere on macOS by replacing system calls

Islander is a container engine with TLS encryption and support for cloud storage; analog of Docker.

Example programs and articles to study Linux namespaces

Volatility plugin to retrieve namespaces and relative processes from a memory dump.

better chrooting with containers

Like a container, only not as nice.

Implementation of an event processing framework within a DPDK accelerated Open vSwitch. The implemented framework embeds the vSwitch with capabilities to detect and process L7 events based on configured event rules. Additionally, an SDN controller based northbound API is implemented to offload application rules onto the vSwitch remotely.

A basic container I made using C to understand how Docker works internally.

Contain is a simple process wrapper(like a container) using namespaces and cgroups -- This is a work in progress to understand inner workings of linux containers

user namespaces in practice

Grsecurity patched Linux, further modified to "containerise" processes automatically. RBAC system has been enhanced to support control of system call filters and namespaces. Currently supports network, IPC and UTS namespaces as well as seccomp filters. Currently x86-64 only. See also https://github.com/dderby/gradm

A toy docker implementation using linux namespaces

PAM module to set a private /tmp per users using Linux namespaces

Gradm with added support to control system call filters and network, IPC and UTS namespaces. Currently supports x86-64 only. See also https://github.com/dderby/linux-4.4.6

A minimal container-like process isolation tool for linux

Section-Oriented C