Transparent Proxy with cgroup v2。透明代理，配合v2ray/Qv2ray食用最佳

Sandbox implemented in GO including containers (namespace, cgroup), ptrace, seccomp

eBPF-based Ethernet traffic monitor using TC, XDP, kprobes and cgroups

cgmemtime measures the high-water RSS+CACHE memory usage of a process and its descendant processes.

Prometheus exporter for Pressure Stall Information (PSI) from Linux kernel.

A high-performance, minimalistic container engine in Rust.

A transparent proxy RULE manager written in go inspired by cgproxy.

Rust async child-process management for tokio: whole-tree kill-on-drop (no orphans), plus streaming, pipelines, timeouts, and supervision library.

This is a lightweight Prometheus exporter for cgroups that only supports the unified cgroup v2 hierarchy. It exposes usage metrics for each cgroup in the hierarchy.

A lightweight process isolation tool, requiring absolutely no privileges to run

Tool to run processes with CPU, memory, and resource limits leveraging Linux cgroups v2

c语言实现的一个简单docker, 支持cgroup v2, overlayfsc语言实现的一个简单docker, 支持cgroup v2, overlayfs, 桥接网络, 端口映射

configuratino snippets for Telegraf (https://www.influxdata.com/time-series-platform/telegraf), usually related to HPC environment

Docker-like tool from scratch

Early OOM Cgroups V2 Freezer

An automated Kubernetes (k3s) benchmarking framework that evaluates container runtime performance between Linux and WebAssembly. Features configuration via YAML, Python orchestration, streamlined Docker containerization, cgroup v2 resource monitoring, and a C-based matrix multiplication workload.

A Lightweight eBPF tool to monitor Podman egress traffic via cgroup egress hook (cgroup/skb) 🐝

F# async child-process management for tokio: whole-tree kill-on-drop (no orphans), plus streaming, pipelines, timeouts, and supervision library.

A simple container built from scratch using Linux namespaces and cgroups to understand low level working of docker container

Lightweight KVM/libvirt management platform with cgroups v2 resource pools, real-time WebSocket task notifications, and automated agent deployment.