Skip to content

README.md

Latest commit

 

History

History
18 lines (14 loc) · 852 Bytes

README.md

File metadata and controls

18 lines (14 loc) · 852 Bytes
Raw

Network-native containerization system

nsproxy, network-namespace with SOCKS5 proxy

  • You can run dockerd within a container, with everything proxied by a SOCK5 proxy
  • The sandbox may defend against casual attackers, or otherwise unnecessary state-cross-contamination of softwares
  • The codebase is a singleton in full Rust. You are expected to modify the code.
  • Native alacritty integration at full speed
  • It's shipped with a GUI written with EGUI, meant to daily-drive desktop with paranoia-level of network control
  • You can control the degree of isolation. In the least isolated case, only network namespace is unshared, such that no softwares break.
  • status, branch main is always production-ready