Go

mini-sentry - Building a Userspace Kernel in Go

I built a userspace kernel. Not a container runtime, not a syscall filter — a program that sits between a sandboxed …