isolate
Sandbox for securely executing untrusted programs (by ioi)
unikernels
Unikernel and immutable infrastructures (by cetic)
| isolate | unikernels | |
|---|---|---|
| 6 | 2 | |
| 895 | 574 | |
| 2.8% | 6.6% | |
| 6.7 | 0.0 | |
| 22 days ago | about 2 years ago | |
| C | C++ | |
| GNU General Public License v3.0 or later | - |
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
isolate
Posts with mentions or reviews of isolate.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2024-03-13.
-
Nanos – A Unikernel
> I currently use isolate (https://github.com/ioi/isolate) which is just a wrapper around cgroups/namespaces, and it's been a lot faster.
Yes. This is the fastest you can get.
If you want safer, do pr_set_seccomp as well. but that would be a custom solution.
- IOI/isolate: Sandbox for securely executing untrusted programs
-
Help running dotnet CLI inside isolate cg-groups sandbox
I'm trying to run the dotnet CLI inside a sandbox (isolate, which is a Linux control-groups-based sandbox, to be more precise), but I can't get the dotnet program to run inside it; I only get this error message (which looks like the compiler itself is crashing?):
-
Released Activepieces v0.3.9 (open-source no-code business automation) and excited about our progress
A lightweight sandbox is created using (https://github.com/ioi/isolate), which basically uses Linux kernel namespaces. It takes around 20 ms to have flow json and the engine inside.
-
Auto Grading platform for assignments - Question
For example, it relies upon the isolate project to easily run untrusted code/untrusted executables in sandboxes. If your students already have their test cases written, then it's just a matter of running them, which isolate can help with.
unikernels
Posts with mentions or reviews of unikernels.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2024-03-13.
-
Nanos – A Unikernel
About unikernels https://github.com/cetic/unikernels?tab=readme-ov-file#unike...
-
Docker is dead?!? Podman - an alternative tool?
Another possibility to switch from Docker containers are the so-called Unikernels. These are briefly mentioned here for the sake of completeness, even though they currently have no significance in the Kubernetes context. An interesting blog post on the topic can be found on Hackernoon. It is an interesting construct that may one day find its way into the world of Kubernetes if containers can be replaced by unikernels. Currently, the use of unikernels would not be feasible in my opinion.
What are some alternatives?
When comparing isolate and unikernels you can also consider the following projects:
activepieces - Your friendliest open source all-in-one automation tool ✨ Workflow automation tool 100+ integration / Enterprise automation tool / Zapier Alternative
podman - Podman: A tool for managing OCI containers and pods.
nanos - A kernel designed to run one and only one application in a virtualized environment
k3d - Little helper to run CNCF's k3s in Docker
nerdctl - contaiNERD CTL - Docker-compatible CLI for containerd, with support for Compose, Rootless, eStargz, OCIcrypt, IPFS, ...