mirror of
https://github.com/linuxkit/linuxkit.git
synced 2025-10-06 09:00:36 +00:00
d80e880f28
This is a project with a v1 of the IMA namespacing patches. See the readme for details on use. Signed-off-by: Tycho Andersen <tycho@docker.com>
31 lines
1.6 KiB
Markdown
31 lines
1.6 KiB
Markdown
# Projects
|
|
|
|
We aim to provide a set of open spaces for collaboration to help move projects towards production. Projects should usually
|
|
at a minimum provide a `README` of how to get started using the project with Moby, and a roadmap document explaining what
|
|
the aims are and how to contribute. Most projects will probably provide a way to run the project in a custom Moby build
|
|
in its current state, which ideally will be integrated in the Moby CI so there are checks that it builds and runs. Over
|
|
time we hope that many projects will graduate into the recommended production defaults, but other projects may remain as
|
|
ongoing projects, such as kernel hardening.
|
|
|
|
If you want to create a project, please submit a pull request to create a new directory here.
|
|
|
|
## Current projects
|
|
- [Kernel Self Protection Project enhancements](kspp/)
|
|
- [Mirage SDK](miragesdk/) privilege separation for userspace services
|
|
- [Wireguard](wireguard/) cryptographic enforced container network separation
|
|
- [OKernel](okernel/) intra-kernel protection using EPT (HPE)
|
|
- [eBPF](ebpf/) iovisor eBPF tools
|
|
- [AWS](aws/) AWS build support
|
|
- [Swarmd](swarmd) Standalone swarmkit based orchestrator
|
|
- [Landlock LSM](landlock/) programmatic access control
|
|
- [Clear Containers](clear-containers/) Clear Containers image
|
|
- [Logging](logging/) Experimental logging tools
|
|
- [etcd cluster](etcd/) etcd cluster demo from DockerCon'17
|
|
- [kernel-config](kernel-config/) an experiment on how to manage kernel config
|
|
- [IMA-namespace](ima-namespace/) patches for supporting per-mount-namespace
|
|
IMA policies
|
|
|
|
## Current projects not yet documented
|
|
- VMWare support (VMWare)
|
|
- ARM port and secure boot integration (ARM)
|