nsjail
A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.
nsjail scores 5.9/10 (Solid) in Sandboxes & Runtimes.
Language C++ License Apache-2.0 Stars 4k★ Type lightweight Self-host Yes Repo google/nsjail Homepage https://nsjail.dev
Quality
Solid 5.9
Adoption 40
Activity 53
Maturity 100
Community 41
Capability 50
Show the math
Overall 5.9/10
value = 5.9/10
score = value
Adoption 4.6/10
value = 40/100
score = 1 + 9 * value / 100
Activity 5.8/10
value = 53.1/100
score = 1 + 9 * value / 100
Maturity 10/10
value = 100/100
score = 1 + 9 * value / 100
Community 4.6/10
value = 40.5/100
score = 1 + 9 * value / 100
Capability 5.5/10
value = 50/100
score = 1 + 9 * value / 100
Key metrics
4k★ GitHub stars
18/90d Recent commits
6 devs/90d Recent contributors
11.1y Project age
active Last commit
Gotchas
No gotchas documented yet. Contribute one if you know a constraint we missed.
Labels
- Self-hosted
Self-hosted
You deploy and operate it yourself; there is no hosted option here.
namespaces seccomp cgroups isolation linux