Boxer: Smaller, Faster, Safer

linuxkit/linuxkit

A toolkit for building secure, portable and lean operating systems for containers

fencesandbox/fence

Lightweight, container-free sandbox for running commands with network and filesystem restrictions

ngerakines/atproto-tools - Docker Image

A comprehensive collection of Rust components for creating AT Protocol applications. This workspace provides essential building blocks for identity management, record operations, OAuth 2.0 authentication flows, HTTP client operations, XRPC services, and real-time event streaming.

Apple’s Containerization Framework and the Future of Secure Computing

The container revolution transformed how we deploy and manage applications, but it also inherited fundamental security and resource…

Rust - The WebAssembly Component Model

Rust has first-class support for WebAssembly core and WebAssembly components via the available targets in the toolchain:

Introducing Matchbox

I'm very happy to announce the Matchbox project. A solution for painless peer-to-peer networking in rust web assembly.

Apptainer - Portable, Reproducible Containers

Apptainer is an open source container platform designed to run complex applications on high-performance computing (HPC) clusters in a simple, portable, and reproducible way.

extism/extism

The framework for building with WebAssembly (wasm). Easily & securely load wasm modules, move data, call functions, and build extensible apps.

extism/extism

The framework for building with WebAssembly (wasm). Easily & securely load wasm modules, move data, call functions, and build extensible apps.

Sooraj on Twitter / X

IronClaw (@near_ai, Rust) is the most architecturally serious alternative. Built by @ilblackdragon as a direct response to OpenClaw's security failures. Tools and channels run in isolated WASM containers with capability-based permissions. Credentials live in an encrypted vault… https://t.co/3VkLn4f0Ai— Sooraj (@iAnonymous3000) February 16, 2026

dagger/container-use

Development environments for coding agents. Enable multiple agents to work safely and independently with your preferred stack.

Container Escape Techniques: Breaking Out of the Digital Jail

How Attackers Break Free From Containerized Environments and What Defenders Need to Know

Blaxel: The Persistent Sandbox Platform | Near Instant Latency

Blaxel is the persistent sandbox platform that keeps infinite secure sandboxes on automatic standby with co-hosted agents and context for near instant latency. Achieve 25ms resume times and eliminate cold starts.

Dagger.io

Build powerful software environments and containerized operations from modular components and simple functions. Perfect for complex software delivery and AI agents. Built by the creators of Docker.