google/nsjail
A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.
[view on github]last commit: Oct 2, 2026
stars
4,164
7d
+15
30d
+48
90d
+147
## star history
## found in