A tool for creating and running Linux containers using lightweight virtual machines on a Mac. It is written in Swift, and optimized for Apple silicon.

A Virtual Machine Monitor for modern Cloud workloads. Features include CPU, memory and device hotplug, support for running Windows and Linux guests, device offload with vhost-user and a minimal com…

The rust-vmm monorepo

Instant, Concurrent, Secure & Lightweight Sandbox for AI Agents.

DeepSeek Harness: Everything is a Plugin.

《深入理解 AI Agent：设计原理与工程实践》（李博杰 著）开源主仓库：全书正文、编译版 PDF 与按章配套代码

AI agent skill that researches any topic across Reddit, X, YouTube, HN, Polymarket, and the web - then synthesizes a grounded summary

An awesome list of Agent Harness engineering resources, including GitHub projects, tools, benchmarks, and practical guides.

Production-grade engineering skills for AI coding agents.

A set of modern Grafana dashboards for Kubernetes.

HTTP 2.0 client & server implementation for Rust.

mimalloc is a compact general purpose allocator with excellent performance.

Fast, multithreaded, modular and extensible DHCP server written in Go

Operating System Manager is responsible for creating and managing the configuration that are needed to configure worker nodes

vArmor is a cloud-native container hardening system that leverages AppArmor/BPF/Seccomp and NetworkProxy technologies to enforce access control from system calls to application protocols — protecti…

Ray is an AI compute engine. Ray consists of a core distributed runtime and a set of AI Libraries for accelerating ML workloads.

The Xous microkernel

Dynamically provision Stateful Persistent Replicated Cluster-wide Fabric Volumes & Filesystems for Kubernetes that is provisioned from an optimized NVME SPDK backend data storage stack.

Linux namespaces and seccomp-bpf sandbox

sandboxing and containment tool used in ChromeOS and Android

A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.

Low-level unprivileged sandboxing tool used by Flatpak and similar projects

🦭 Distributed log streaming engine built from first principles

Advanced configuration options for sockets.

transparent redirector of any TCP/UDP connection to proxy

An eBPF Manager for Linux and Kubernetes

A lightweight Kubernetes-compatible container orchestration system written in Rust, implementing the Container Runtime Interface (CRI) with support for single containers, Kubernetes-style pods, and…