Unprivileged AI-agent sandbox on raw Linux primitives (namespaces, Landlock, seccomp, cgroups, BPF LSM). --rootfs, veth NAT, serve/exec, cell pool. No Docker.

ai-agents arch-linux cgroups container-alternative ebpf kernel landlock linux sandbox seccomp security
1 Open Issue Need Help Last updated: Sep 29, 2026

Open Issues Need Help

View All on GitHub

Unprivileged AI-agent sandbox on raw Linux primitives (namespaces, Landlock, seccomp, cgroups, BPF LSM). --rootfs, veth NAT, serve/exec, cell pool. No Docker.

C
#ai-agents#arch-linux#cgroups#container-alternative#ebpf#kernel#landlock#linux#sandbox#seccomp#security