gvisor 开源项目推荐（213 个）

xjasonlyu /tun2socks

tun2socks - powered by gVisor TCP/IP stack

deeplethe /sandstorm

在最便宜的机器上运行数千个 AI 代理沙箱。

monasticacademy /httptap

查看任何 Linux 程序发出的 HTTP/HTTPS 请求

BitMiracle-AI /Dormice

智能体沙箱界的 SQLite——可自托管、兼容 E2B。一台机器即可运行永久存活的沙箱，空闲零成本。

wrr /drop

Linux sandboxing that doesn't get in your way

vhive-serverless /vHive

vHive：用于无服务器实验的开源框架

EtiennePerot /safe-code-execution

Code execution utilities for Open WebUI & Ollama

moabukar /CKS-Exercises-Certified-Kubernetes-Security-Specialist

一套精选练习，帮助你准备 CKS 考试

imgk /shadow

A rule-based transparent proxy for Windows, Linux, macOS

inetaf /netstack

automated "fork" of gVisor that only contains the netstack bits so the go.mod is smaller. maintained by scripts, not humans.

aojea /netkat

netcat using netstack userspace library and eBPF

sandbox0-ai /sandbox0

Archived historical Apache-2.0 release of Sandbox0. Current Sandbox0 runtime development is closed source. Product and support: https://sandbox0.ai

0xjohnnydev /defending-code-reference-harness-codex

Codex-first fork of Anthropic's defending-code-reference-harness for vulnerability discovery and patch validation

DaniilSokolyuk /go-pcap2socks

go-pcap2socks functions like a router, allowing you to connect various devices such as an XBOX, PlayStation (PS4, PS5), Nintendo Switch, mobile phones, printers and others to any SOCKS5 proxy server. Additionally, you can just start go-pcap2socks with the default direct outbound to share your VPN connection to any devices on your network.

Clawdlinux /agentic-operator-core

Runtime-agnostic Kubernetes governance for AI agents: gVisor isolation, egress policy, cost controls, and offline audit verification primitives.

IreliaTable /irelia

A modern relational spreadsheet 🌈

novitalabs /NovitaBox

Local AI agent sandbox runtime with Firecracker, gVisor, and NVIDIA GPU sandbox support.

openberth /openberth

Self-hosted deployment platform. Give it code, get a live HTTPS URL. Supports Node.js, Python, Go, and static sites. Every deployment runs sandboxed in gVisor. Three static Go binaries, zero runtime dependencies.

can1357 /isobox

Run a command in a sandbox with the same flags on every OS — one capability model compiled to Seatbelt (macOS), gVisor (Linux), and AppContainer (Windows).

zalaso /sharebox

Publish and share the small web tools your AI agents build, as easily as a Google Doc. Google sign-in, permissions, storage and gVisor sandboxing built in. Self-hosted.