rootless-containers / runrootless
rootless OCI container runtime with ptrace hacks (No root privileges nor SUID binaries (e.g. newuidmap) are required!)
☆119Updated 6 years ago
Related projects ⓘ
Alternatives and complementary repositories for runrootless
- containerd shim for gVisor☆80Updated 4 years ago
- A Go package for building hardware virtualized container runtimes☆139Updated 6 years ago
- OCI-interfacing Container runtime for Nabla Containers☆257Updated 3 years ago
- A tool to list and diagnose bpf programs. (Who watches the watchers..? :)☆94Updated 4 years ago
- Runc hook (OCI compatible) for setting up default bridge networking for containers.☆224Updated 3 years ago
- Build OCI images from Dockerfiles.☆182Updated 6 years ago
- Virtual k8s cluster for testing.☆83Updated 5 years ago
- Container Network Management☆44Updated 4 years ago
- Container Builder Interface for Kubernetes with support for several backends (Docker, BuildKit, Buildah, kaniko, img, Google Cloud Contai…☆243Updated 5 years ago
- A framework for managing containerized storage systems on top of Kubernetes☆92Updated 6 years ago
- A transport-agnostic, filesystem metadata manifest system☆145Updated last week
- [EOL] test frameworks for testing kubernetes☆34Updated 4 years ago
- torcx is a boot-time addon manager for immutable systems☆73Updated 5 years ago
- A ps(1) AIX-format compatible golang library☆59Updated last week
- A simple program to benchmark various container networking (CNI) plugins.☆84Updated 5 years ago
- A Go library to control the Open vSwitch in-kernel datapath☆74Updated 3 years ago
- Docker in UserModeLinux in Docker☆98Updated 2 years ago
- Container image converter aiming to minimize image size and speed up boot time dramatically with block-level de-dupliction and lazy-pull …☆20Updated 5 years ago
- eBPF Utilities, Maps, and more☆250Updated last year
- Now moved into `github.com/inspektor-gadget/inspektor-gadget/pkg/gadget-collection/gadgets/traceloop`. Tracing system calls in cgroups u…☆198Updated last year
- checksum-reproducible tar archives (utility/library)☆96Updated 3 weeks ago
- OCI hook to enable running systemd in a container☆64Updated 5 years ago
- transport-agnostic, fine-grained content-addressable container image layout☆23Updated 5 years ago
- A generic CNI library to provide APIs for CNI plugin interactions☆146Updated 3 months ago
- Entitlements library for high level control of container permissions☆66Updated 6 years ago
- External IP controller is k8s application which is deployed on top of k8s cluster and which configures External IPs on k8s worker node(s)…☆78Updated 4 years ago
- Generate seccomp profiles from go binaries☆136Updated 6 years ago
- Go-based framework for running benchmarks against Docker, containerd, runc, or any CRI-compliant runtime☆147Updated 3 months ago
- Split kernel using extended page tables to provided kernel memory protection☆24Updated 6 years ago
- k-vswitch is an easy-to-operate, performant and secure Kubernetes networking plugin based on Open vSwitch☆84Updated last year