Our great sponsors
-
crosvm mentions minijail, which is a sandboxing tool that can sandbox individual processes in a machine. Other tools in that space are firejail and bubblewrap.
-
QEMU
Official QEMU mirror. Please see https://www.qemu.org/contribute/ for how to submit changes to QEMU. Pull Requests are ignored. Please only use release tarballs from the QEMU website.
I believe the Rust project sandboxes its builds using QEMU, which is a virtual machine. Using a VM for your sandboxing tool requires spinning up a separate VM for each user. As far as I am aware, QEMU is not intended for use as a security tool, but it's probably good enough for your use case. Another VM that is designed for security isolation is crosvm, but it may be hard to compile + run crosvm outside the Chrome OS environment.
-
WorkOS
The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.
-
crosvm mentions minijail, which is a sandboxing tool that can sandbox individual processes in a machine. Other tools in that space are firejail and bubblewrap.
-
-
Apparently Firejail is part of it.
-
InfluxDB
Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.