Skip to content
/ bento Public

Bento is a container implementation written in Rust.

License

Notifications You must be signed in to change notification settings

kevinji/bento

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

46 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Bento

Bento is a container implementation written in Rust.

It supports the following features:

  • New root filesystem via pivot_root and umount2
  • New cgroup, IPC, network, mount, PID, UTS, and user (if supported) namespaces
  • Settable UID/GID within container, with allowed UIDs from /etc/subuid and GIDs from /etc/subgid
  • cgroup v2 restrictions on memory, PIDs, and CPU shares
  • rlimit restriction on file descriptors
  • Capabilities dropped to control privileges
  • Seccomp BPF filter to restrict syscalls

It also uses the lddtree crate to automatically find the necessary .so files needed to run a given command by parsing its ELF header.

TODO

  • Fix networking inside the container

References

About

Bento is a container implementation written in Rust.

Topics

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages