Sandboxes
NsJail
Constrain Linux processes with namespaces, resource limits and syscall filters.
4.2K GitHub starsAs of Checked
Where it fits
What you can use it for
Engineers building a Linux execution boundary for agent tools.
Give untrusted code a controlled place to run.
Before you adopt
What to check for your team
This is a low-level isolation tool. Your integration must define mounts, users, network access and syscall policy.
Get help evaluating the fitLicence and scope
Apache-2.0
Applies to this repository. Dependencies, model weights, datasets and hosted services can have separate terms.
Read the upstream licenceSupport the work
Go directly to the maintainers
Use the project's contribution guidance to report issues, help with documentation or contribute code. Follow any published funding links if you want to support the maintainers financially.
Find contribution guidanceKeep exploring
