DockerSlim (docker-slim): Don't change anything in your Docker container image and minify it by up to 30x (and for compiled languages even more) making it secure too! (free and open source)

A stupid game for learning about containers, capabilities, and syscalls.

Provide powerful tools for seccomp analysis

The main libseccomp repository

The libseccomp golang bindings repository

Generate seccomp profiles from go binaries

Simplifying Seccomp enforcement in containerized or non-containerized apps

Online resources that will help you prepare for taking the CNCF/Linux Foundation CKS 2020 "Kubernetes Certified Security Specialist" Certification exam. with time, This is not likely the comprehensive up to date list - please make a pull request if there something that should be added here.

The Kubernetes Security Profiles Operator

Build custom Docker seccomp profiles for containers by finding syscalls it uses.

Rust implementation of PRoot, a ptrace-based sandbox

Record process launches and files read and written by each process

BPF Processor for IDA Python

Go library for installing a seccomp BPF system call filter.

Online Judge for testing programming ability in C, C++, Java and Python.

A high scalable low to medium interactive SSH/TCP honeypot using Linux Namespaces, capabilities, seccomp, cgroups designed for OpenWrt and IoT devices.

Docker Secure Computing Profile Generator

Going Florida on container keyring masks. A tool to demonstrate the ineffectivity containers have on isolating Linux Kernel keyrings.

Simple seccomp library for rust

Start Linux programs with only selected syscalls enabled (libseccomp-based)

A CSP endpoint to aggregate, correlate and analyze report-uri violations across your infrastructure

A portable version of OpenBSD's privsep/sandboxed file(1) utility

🔒 download, verify & run torbrowser in a sandbox

xinetd-kafel is a more secure replacement for xinetd with secure computing (seccomp, only work on linux)

Go VirtualBox vboxsf sendfile bug workaround

strace2seccomp - generates libseccomp policies from strace logs

low-level bindings to libseccomp

zenroomjs 🉑 provides a javascript wrapper of zenroom, a secure and small virtual machine for crypto language processing

Merged to firejail; Find syscalls of executables for seccomp-bpf sandbox policies.

📚 🐳 For DevOps Engineers 🐳 📚