seccomp-profile

Slim（或SlimToolkit 、DockerSlim）是一个 Docker 镜像瘦身工具

OCI hook to trace syscalls and generate a seccomp profile

minT(oolkit): Mint awesome, secure and production ready containers just the way you need them! Don't change anything in your container image and minify it by up to 30x (and for compiled languages even...

Docker Secure Computing Profile Generator

Isolated Firefox browser with pre-configured extensions. Customize with your own extensions as needed.

Agent Security Runtime

Merged to firejail; Find syscalls of executables for seccomp-bpf sandbox policies.

Using Rego (OPA) for applying policy on Kubernetes workloads

Tool to capture containers syscalls and generate a Seccomp profile

🔍 Profile WordPress hooks to pinpoint performance issues and optimize execution time by plugin with minimal overhead using this powerful tool.

Tool to enable bind mounting between two paths that are both inside the container.

Blogpost material: how to use a custom seccomp profile on a managed Kubernetes cluster

Flask demo for presentation at Devops NG on Linux container hardening

Flask demo for presentation at Devops NG on Linux container hardening