google/nsjail

View on GitHub

A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.

Stars: 4.1k
Forks: 371
Open beginner issues: 0
Indexed issues: 7
Avg merge: 4d 7h
Merged PRs (30d): 7

Dominant language: C++
License: Apache-2.0
Last GitHub push: Aug 27, 2026
Latest indexed: Sep 16, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: No beginner labels indexed

Open All

7 open issues indexed

Use existing network namespace Open

enhancement

google/nsjail#89 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Build instructions? Open

google/nsjail#137 · 5 comments · 1 reaction · 0 assignees · Indexed Sep 16, 2026
Package nsjail for ease of installation on Linux Open

enhancement

google/nsjail#210 · 7 comments · 3 reactions · 0 assignees · Indexed Sep 16, 2026
New option to create init process Open

google/nsjail#263 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Allow a separate log level for stderr when --log/--log_fd points elsewhere Open

google/nsjail#301 · 1 comment · 1 reaction · 0 assignees · Indexed Sep 16, 2026
nstun: bounds-checked cursor for peer-controlled packet parsing + libFuzzer/OSS-Fuzz coverage Open

google/nsjail#309 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
mnt: new-API path silently drops nosuid/nodev/noexec on nested submounts if the recursive mount_setattr fails Open

google/nsjail#312 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026

google/nsjail

Get new issues in your inbox