Network-native containerization system

nsproxy, network-namespace with SOCKS5 proxy

You can run dockerd within a container, with everything proxied by a SOCK5 proxy
The sandbox may defend against casual attackers, or otherwise unnecessary state-cross-contamination of softwares
The codebase is a singleton in full Rust. You are expected to modify the code.
Native alacritty integration at full speed
It's shipped with a GUI written with EGUI, meant to daily-drive desktop with paranoia-level of network control
You can control the degree of isolation. In the least isolated case, only network namespace is unshared, such that no softwares break.
status, branch main is always production-ready

Name		Name	Last commit message	Last commit date
Latest commit History 398 Commits
.cargo		.cargo
.vscode		.vscode
crates		crates
derive		derive
dev		dev
devscripts		devscripts
examples		examples
profiles		profiles
.gitignore		.gitignore
.gitmodules		.gitmodules
.stignore		.stignore
AGENTS.md		AGENTS.md
Cargo.lock		Cargo.lock
Cargo.toml		Cargo.toml
LICENSE.md		LICENSE.md
README.md		README.md
README.old.md		README.old.md
STATE.md		STATE.md
build-ui.sh		build-ui.sh
build.rs		build.rs
dev.md		dev.md
env.fish		env.fish
image-1.png		image-1.png
image-2.png		image-2.png
image.png		image.png
install.sh		install.sh
install_release.sh		install_release.sh
install_to_usr_local.sh		install_to_usr_local.sh
note.drawio		note.drawio
nsproxy.json		nsproxy.json
pic.png		pic.png
push_all.fish		push_all.fish
release.sh		release.sh
release_upx.sh		release_upx.sh
resolv.conf		resolv.conf
rust-analyzer.toml		rust-analyzer.toml
rust-toolchain.toml		rust-toolchain.toml
screen1.png		screen1.png
screen2.png		screen2.png
screencap1.png		screencap1.png
set_branch.fish		set_branch.fish
speed-single.png		speed-single.png
strip.sh		strip.sh
testing_install.sh		testing_install.sh
testing_install_optimized.sh		testing_install_optimized.sh
vscodeprompt.png		vscodeprompt.png

Provide feedback