shoenig / nomad-pledge-driverLinks
Nomad task driver capable of blocking unwanted syscall and filesystem access. Based on the pledge utility for Linux by Justine Tunney
☆23Updated last year
Alternatives and similar repositories for nomad-pledge-driver
Users that are interested in nomad-pledge-driver are comparing it to the libraries listed below
Sorting:
- rsync, scp, sftp, and sshfs for your object store☆20Updated 4 months ago
- Cloud ready L4 TCP proxy with first-class support for dynamic listeners☆44Updated 3 months ago
- A Nomad task driver for systemd-nspawn☆56Updated last month
- z-run -- scripting library lightweight Go-based tool☆37Updated 11 months ago
- A simpler jq, and with JSONPath☆42Updated 2 years ago
- Scripts for building FreeBSD VMs for use with podman☆49Updated last year
- TFTP, HTTP library, and CLI server for serving iPXE binaries☆27Updated 4 months ago
- A CoreDNS based service that forwards traditional DNS requests to a DNS-over-TLS upstream server☆14Updated 5 years ago
- static site generator for git repos☆39Updated 4 months ago
- Age encrypted notes saved in a bolt DB☆21Updated 6 months ago
- A generic pubsub implementation for Go☆45Updated 8 months ago
- Something like puppet, for the localhost only.☆95Updated last year
- ContainerScale is a CNI plugin to automatically attach containers to your tailscale network☆17Updated last year
- Create and manage bare metal disk images from docker images☆38Updated last year
- Configure systems using any scripting language☆93Updated last month
- CoreDNS plugin that serves .local mDNS info over normal DNS☆53Updated last week
- Create microVMs from OCI images☆35Updated last week
- rsync wrapper (or output parser) that pushes metrics to prometheus☆63Updated 3 months ago
- PoC HTTP proxy for scale-to-zero apps via the Fly machines API☆15Updated 3 years ago
- MediaWiki-inspired wiki in Go☆15Updated 11 months ago
- Shell Of A New Machine: Quickly configure new environments☆40Updated 2 years ago
- ☆84Updated 4 years ago
- Glim is a simple identity access management system that speaks some LDAP and has a REST API to manage users and groups☆27Updated 7 months ago
- Automatically configure Wireguard interfaces in distributed system. It supports Consul as backend.☆12Updated 5 years ago
- A HashiCorp Vault plugin for managing Tailscale authentication keys☆81Updated last year
- A TCP proxy used to expose services onto a tailscale network without root. Ideal for container environments.☆142Updated 3 years ago
- Minimal package for just the HTTPS cert fetching part of the Tailscale client API☆27Updated last year
- A lightweight service exchanging OIDC tokens for Tailscale Auth Keys☆29Updated 2 years ago
- The UNIX holy trinity, reimagined☆10Updated 2 years ago
- Minimal linux distribution for running kubernetes ("boot2kubeadm")☆25Updated last year