Gthulhu optimizes cloud-native workloads using the Linux Scheduler Extension for different application scenarios.

Sys::Ebpf is a pure-perl library to read, modify and load eBPF programs and attach them to various hooks in the Linux kernel.In other words eBPF Loader for written in Perl.

セキュリティ・キャンプ 2022 B6

Automated upstream mirror for libbpf stand-alone build.

Kata Containers is an open source project and community working to build a standard implementation of lightweight Virtual Machines (VMs) that feel and perform like containers, but provide the workl…

Rust Language Bindings for the libseccomp Library

Examples of using BPF ring buffer APIs

⎈ Multi pod and container log tailing for Kubernetes -- Friendly fork of https://github.com/wercker/stern

[Experimental] Accelerates slirp4netns using SECCOMP_IOCTL_NOTIF_ADDFD. As fast as `--net=host`.

[POC] Rootless Containers without `/etc/subuid` and `/etc/subgid`

The Kubernetes Security Profiles Operator

Empowering everyone to build reliable and efficient software.

The libseccomp golang bindings repository

low-level bindings to libseccomp

Rust friendly bindings to *nix APIs

The main libseccomp repository

A set of system-oriented validators for kubeadm preflight checks.

Kubernetes Rust Kubelet

Kubernetes without the root privileges

Create a dedicated IaaS instance per Pod to mitigate container breakout (including CPU vulnerabilities depending on the instance type)

concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit

Fast container image distribution plugin with lazy pulling

Format bpftrace JSON into prometheus-compat textfile

Raw bindings to platform APIs for Rust

BCC - Tools for BPF-based Linux IO analysis, networking, monitoring, and more

High-level tracing language for Linux

Open Container Initiative-based implementation of Kubernetes Container Runtime Interface

Podman: A tool for managing OCI containers and pods.