shoenig / nomad-pledge-driver
Nomad task driver capable of blocking unwanted syscall and filesystem access. Based on the pledge utility for Linux by Justine Tunney
☆22Updated last year
Alternatives and similar repositories for nomad-pledge-driver
Users that are interested in nomad-pledge-driver are comparing it to the libraries listed below
Sorting:
- Expect for Go☆11Updated last year
- Automatically configure Wireguard interfaces in distributed system. It supports Consul as backend.☆12Updated 5 years ago
- Github Actions wrapper for vmtest☆11Updated 4 months ago
- A high availability distributed filesystem built on FoundationDB and fuse.☆18Updated 2 years ago
- rsync, scp, sftp, and sshfs for your object store☆20Updated last month
- gokrazy remote syslog server daemon: writes to disk what it receives via remote syslog☆14Updated last year
- Scripts for building FreeBSD VMs for use with podman☆48Updated last year
- Cloud ready L4 TCP proxy with first-class support for dynamic listeners☆44Updated 3 weeks ago
- Compile a Simplenetes YAML spec into a runnable Pod executable☆16Updated 4 years ago
- ☆15Updated 3 years ago
- A mirroring, checksumming, and self-healing filesystem layer for OpenBSD.☆50Updated 2 years ago
- List files in categories (and columns) - from Coherent UNIX☆41Updated 4 years ago
- An extension for the GitHub Cli application that displays your current contribution graph☆13Updated 3 years ago
- PoC HTTP proxy for scale-to-zero apps via the Fly machines API☆15Updated 3 years ago
- FUSE filesystem to mount git repos.☆16Updated 2 years ago
- Rust Relayd - Early WIP. See also: https://github.com/reyk/privsep-rs☆24Updated 3 years ago
- Xe's RISCV kernel/OS for learning RISCV☆13Updated 2 years ago
- Unofficial mirror of plan9-from-bell-labs/u9fs☆11Updated 3 years ago
- Create microVMs from OCI images☆34Updated 11 months ago
- ☆12Updated 4 years ago
- PAM module that allows redirection of credentials to a local UNIX socket.☆21Updated this week
- Package wgdynamic implements a client and server for the the wg-dynamic protocol. MIT Licensed.☆13Updated 2 years ago
- a continuous Bass service☆22Updated last year
- ☆18Updated this week
- Literate testing for command-line programs☆40Updated 4 months ago
- A CoreDNS based service that forwards traditional DNS requests to a DNS-over-TLS upstream server☆14Updated 5 years ago
- PXE-chainloadable iPXE for Raspberry Pi 4 with full diskless example☆11Updated last year
- Create small Go-based root file systems -- with support for CPIOs and (TBD) Docker images☆16Updated last month
- Oxide Terraform provider☆25Updated last week
- TFTP, HTTP library, and CLI server for serving iPXE binaries☆27Updated 2 months ago