cgroups

Writing a container in a few lines of Go code, as seen at DockerCon 2017 and on O'Reilly Safari

A sophisticated low memory handler for Linux

cgroups package for Go

Command line tool to view namespaces and cgroups, useful for low-level container prodding

A fast, rootless sandbox and virtual resource runtime for any workload, including untrusted and AI-generated code. Daemonless: a real, kernel-enforced container in ~3.5 ms from an OCI image, out of one static binary

BenchExec: A Framework for Reliable Benchmarking and Resource Measurement

eBPF-based Ethernet traffic monitor using TC, XDP, kprobes and cgroups

A simple educational linux container runtime.

Kubernetes CPU limits make your apps (very) slow and costly. CPU throttling analyzed, with proof.

metric collectors for various stuff not (or poorly) handled by other monitoring daemons

Process isolation for Linux using namespaces, resource limits, cgroups, landlock and seccomp.

Blazingly fast Linux syscall collector

Prometheus exporter for Pressure Stall Information (PSI) from Linux kernel.

Under Improvement

Toy container build from scratch in Go solely for learning purpose

A Docker/LXC/Kubernetes, database-free, lightweight container performance monitoring solution, perfect for ephemeral containers (e.g. containers used for DevOps automatic testing). Can also be used with InfluxDB, Prometheus and Grafana

A tiny tool to manage containers (inspired by docker).

Improve responsiveness during heavy swapping: keep amount of available memory

Pipe runc (OCI compatible) events to a stats TUI (Text User Interface).

Rust async child-process management for tokio: whole-tree kill-on-drop (no orphans), plus streaming, pipelines, timeouts, and supervision library.