LiteBox
Sandboxing library OS in Rust that shrinks the host interface
What it is
LiteBox is a library operating system written in Rust that isolates programs by exposing only a narrow interface to the underlying host. It pairs a POSIX-style upper interface with pluggable platform backends, so the same code can run in kernel or user mode. Systems and security engineers use it to run unmodified Linux programs on Windows, sandbox Linux apps on Linux, or run workloads on confidential-computing targets such as SEV-SNP and OP-TEE.
