multikernel/sandlock
Lightweight process-based sandbox for Linux, no container, no VM, no root.
Combines **Landlock** (filesystem/network/IPC), **seccomp-bpf**, and **seccomp user notification** for fine-grained syscall filtering, resource limits, and dynamic runtime policy callbacks. Offers a Rust core library, CLI tool, and Python SDK with pipeline composition for multi-stage workflows; features include COW filesystem protection, deterministic execution modes, and per-PID network control without requiring root or cgroups.
16 stars and 1,282 monthly downloads. Available on PyPI.
Stars
16
Forks
3
Language
Python
License
Apache-2.0
Category
Last pushed
Mar 27, 2026
Monthly downloads
1,282
Commits (30d)
0
Dependencies
1
Get this data via API
curl "https://pt-edge.onrender.com/api/v1/quality/agents/multikernel/sandlock"
Open to everyone — 100 requests/day, no key needed. Get a free key for 1,000/day.
Featured in
Compare
Related agents
e2b-dev/E2B
Open-source, secure environment with real-world tools for enterprise-grade agents.
alibaba/OpenSandbox
OpenSandbox is a general-purpose sandbox platform for AI applications, offering multi-language...
e2b-dev/infra
Infrastructure that's powering E2B Cloud.
boxlite-ai/boxlite
Sandboxes for every agent. Embeddable, stateful, snapshots, and hardware isolation.
always-further/nono
Secure, kernel-enforced sandbox CLI and SDKs for AI agents. Capability-based isolation with...