Server-side sandboxing: Containers and seccomp

1. windmill

   1 91 12,551 10.0 HTML

   Open-source developer platform to power your entire infra and turn scripts into webhooks, workflows and UIs. Fastest workflow engine (13x vs Airflow). Open-source alternative to Retool and Temporal.

   

   If you are looking to self-host a scalable backend that runs arbitrary code in python/typescript/bash/go with sandboxing and nsjail like figma, nsjail is what we use as isolation layer at https://windmill.dev (Open-source alternative to Retool/Airplane)

2. CodeRabbit

   coderabbit.ai featured

   CodeRabbit: AI Code Reviews for Developers. Revolutionize your code reviews with AI. CodeRabbit offers PR summaries, code walkthroughs, 1-click suggestions, and AST-based analysis. Boost productivity and code quality across all major languages with each PR.

   

3. nsjail

   2 7 3,159 5.7 C++

   A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.

   

   So what's the difference between nsjail[1] and bubblewrap[2]?

   [1] https://github.com/google/nsjail

4. bubblewrap

   3 79 4,189 7.6 C

   Low-level unprivileged sandboxing tool used by Flatpak and similar projects

   

Suggest a related project