Sandbox service built on Linux container technologies with simple REST and gRPC API

pmdaemon service

Sandbox service built on Linux container technologies with simple REST and gRPC API.

A Prometheus-compatible metrics exporter that monitors container resource usage of Kubernetes workloads.

Java agent to patch Gradle 8.x with cgroup v2 support for better memory detection in containers

Go library for configuring cgroup v2

Lightweight Prometheus exporter for Docker container metrics, memory, CPU, network, disk I/O, and container state, without the overhead of cAdvisor.

Lightweight Prometheus exporter for Docker container metrics — built for ARM64 and cgroup v2

Manages Linux cgroup configuration across Debian/Ubuntu and RedHat/AlmaLinux/Rocky/Fedora. Ensures persistent kernel parameters via GRUB updates and reboots when changes are applied.

A small eBPF-based sandboxing tool designed to block any attempt by a process or its descendants to escalate to root with setuid() / setreuid() / setresuid().