A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.
一个轻量级的进程隔离工具,利用 Linux 命名空间、cgroups、rlimits 和 seccomp-bpf 系统调用过滤器,并利用 Kafel BPF 语言来增强安全性。
Updated 2026-08-27 14:18:02 -07:00