Boxer offers a lightweight, secure, and near-universally deployable alternative to traditional containers using WebAssembly.
Moving Beyond Containers - Introducing Boxer by Daniel Phillips @Wasm I/O 2025
fencesandbox/fence
Lightweight, container-free sandbox for running commands with network and filesystem restrictions
ngerakines/atproto-tools - Docker Image
A comprehensive collection of Rust components for creating AT Protocol applications. This workspace provides essential building blocks for identity management, record operations, OAuth 2.0 authentication flows, HTTP client operations, XRPC services, and real-time event streaming.
Apple’s Containerization Framework and the Future of Secure Computing
The container revolution transformed how we deploy and manage applications, but it also inherited fundamental security and resource…
Rust - The WebAssembly Component Model
Rust has first-class support for WebAssembly core and WebAssembly components via the available targets in the toolchain:
Containers From Scratch • Liz Rice • GOTO 2018
Apptainer - Portable, Reproducible Containers
Apptainer is an open source container platform designed to run complex applications on high-performance computing (HPC) clusters in a simple, portable, and reproducible way.
extism/extism
The framework for building with WebAssembly (wasm). Easily & securely load wasm modules, move data, call functions, and build extensible apps.
extism/extism
The framework for building with WebAssembly (wasm). Easily & securely load wasm modules, move data, call functions, and build extensible apps.
Sooraj on Twitter / X
IronClaw (@near_ai, Rust) is the most architecturally serious alternative. Built by @ilblackdragon as a direct response to OpenClaw's security failures. Tools and channels run in isolated WASM containers with capability-based permissions. Credentials live in an encrypted vault… https://t.co/3VkLn4f0Ai— Sooraj (@iAnonymous3000) February 16, 2026
dagger/container-use
Development environments for coding agents. Enable multiple agents to work safely and independently with your preferred stack.
Container Escape Techniques: Breaking Out of the Digital Jail
How Attackers Break Free From Containerized Environments and What Defenders Need to Know
Blaxel: The Persistent Sandbox Platform | Near Instant Latency
Blaxel is the persistent sandbox platform that keeps infinite secure sandboxes on automatic standby with co-hosted agents and context for near instant latency. Achieve 25ms resume times and eliminate cold starts.
Dagger.io
Build powerful software environments and containerized operations from modular components and simple functions. Perfect for complex software delivery and AI agents. Built by the creators of Docker.
How eBPF is shaping the future of Linux and platform engineering
When Docker burst onto the scene in 2013, Linux containers seemed like an overnight success. But the evolution to containers—and microservices and Kubernetes—was actually decades in the making, based on kernel primitives in the Linux operating system. Docker used these primitives, namely cgroups and namespaces, as building blocks to create a lightweight, easy-to-use software packaging format. Linux containers had been used by Google and others for many years, but Docker made them easily accessible to mainstream developers.
anthropic-experimental/sandbox-runtime
A lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.