Sandbox service built on Linux container technologies with simple REST and gRPC API

pmdaemon service

Sandbox service built on Linux container technologies with simple REST and gRPC API.

Go library for configuring cgroup v2

Manages Linux cgroup configuration across Debian/Ubuntu and RedHat/AlmaLinux/Rocky/Fedora. Ensures persistent kernel parameters via GRUB updates and reboots when changes are applied.

Java agent to patch Gradle 8.x with cgroup v2 support for better memory detection in containers

Lightweight Prometheus exporter for Docker container metrics, memory, CPU, network, disk I/O, and container state, without the overhead of cAdvisor.

A Prometheus-compatible metrics exporter that monitors container resource usage of Kubernetes workloads.

A small eBPF-based sandboxing tool designed to block any attempt by a process or its descendants to escalate to root with setuid() / setreuid() / setresuid().