Other / unclassified
nanos
nanovms/nanos
Nanos is a minimal unikernel engineered to run a single application inside a virtual machine, deliberately omitting multi-process support, users and remote administration to deliver small, fast and isolated deployment images.
Topics
Related projects
microsandbox9kA fast local-first microVM runtime and SDK for running untrusted AI agents, code, and automation in hardware-isolated sandboxes.
boxlite2.6kA lightweight hardware-isolated micro-VM sandbox runtime that gives AI agents safe, persistent code execution anywhere.
vm24.1kAn in-process Node.js sandbox library that isolates untrusted JavaScript through proxies and module allowlists, letting applications execute external scripts with restricted access.
unikraft3.9kUnikraft is an open-source unikernel development kit: a modular library OS plus the kraft toolchain for building lightweight, secure single-purpose virtual machines.
landrun2.3kLandrun is a lightweight CLI sandbox that uses Linux Landlock to run arbitrary processes with fine-grained filesystem and network restrictions.
agent-safehouse2.1kAgent Safehouse is a macOS sandboxing layer that confines local LLM coding agents with deny-first policies, so they can only read, write and reach the files and integrations they actually need.