shoenig / nomad-pledge-driverLinks
Nomad task driver capable of blocking unwanted syscall and filesystem access. Based on the pledge utility for Linux by Justine Tunney
☆24Updated last year
Alternatives and similar repositories for nomad-pledge-driver
Users that are interested in nomad-pledge-driver are comparing it to the libraries listed below
Sorting:
- TFTP, HTTP library, and CLI server for serving iPXE binaries☆28Updated 2 weeks ago
- rsync, scp, sftp, and sshfs for your object store☆20Updated 8 months ago
- Scripts for building FreeBSD VMs for use with podman☆49Updated 2 years ago
- Cloud ready L4 TCP proxy with first-class support for dynamic listeners☆44Updated 7 months ago
- A Nomad task driver for systemd-nspawn☆57Updated last month
- A simpler jq, and with JSONPath☆42Updated 2 years ago
- Runnable Markdown for Tutorials and Demos☆35Updated 3 weeks ago
- z-run -- scripting library lightweight Go-based tool☆38Updated 2 weeks ago
- Shell Of A New Machine: Quickly configure new environments☆41Updated 3 years ago
- PoC HTTP proxy for scale-to-zero apps via the Fly machines API☆15Updated 4 years ago
- A CoreDNS based service that forwards traditional DNS requests to a DNS-over-TLS upstream server☆14Updated 5 years ago
- Create microVMs from OCI images☆35Updated 3 months ago
- Glim is a simple identity access management system that speaks some LDAP and has a REST API to manage users and groups☆28Updated 11 months ago
- Something like puppet, for the localhost only.☆97Updated last year
- Configure systems using any scripting language☆94Updated 3 weeks ago
- Create and manage bare metal disk images from docker images☆39Updated 2 years ago
- Age encrypted notes saved in a bolt DB☆22Updated 11 months ago
- A cuelang testing package☆13Updated 3 years ago
- CoreDNS plugin that serves .local mDNS info over normal DNS☆55Updated last month
- illumos Project Discussion☆46Updated last week
- Create, publish and virtualize ephemeral Linux VMs with ease☆125Updated this week
- Image builder image definition library☆34Updated this week
- A lightweight service exchanging OIDC tokens for Tailscale Auth Keys☆32Updated 2 years ago
- Certonid is a Serverless SSH Certificate Authority☆78Updated last month
- Go SCEP server☆41Updated 9 months ago
- Minimal package for just the HTTPS cert fetching part of the Tailscale client API☆30Updated this week
- A generic pubsub implementation for Go☆44Updated last year
- snare: GitHub webhooks daemon☆66Updated 6 months ago
- Create filesystems using your favorite HTTP framework.☆38Updated last year
- A HashiCorp Vault plugin for managing Tailscale authentication keys☆88Updated 2 years ago