Sandboxd

Secure Linux sandboxing engine for safely executing untrusted code using isolated environments and resource-controlled execution.

Architecture Overview

Go backend integrated with NsJail for isolated execution environments and configurable multi-language runtime support.

Handling secure execution of arbitrary code while preventing resource abuse and filesystem escape attempts.

Implemented namespace isolation, request validation, resource limits, restricted execution environments, and controlled runtime behavior.

Future improvements include seccomp filtering, microVM integration, and advanced runtime monitoring.

Built a secure sandboxing engine using Go and NsJail for isolated code execution.
Implemented process isolation, filesystem restrictions, and resource limiting for untrusted programs.
Designed a plug-and-play language registry system using YAML-based configuration.
Developed concurrent execution handling and secure REST APIs for code execution workflows.