cgroups

A sophisticated low memory handler for Linux

BenchExec: A Framework for Reliable Benchmarking and Resource Measurement

metric collectors for various stuff not (or poorly) handled by other monitoring daemons

Improve responsiveness during heavy swapping: keep amount of available memory

A program to print consumed resources at the end of a slurm job.

GenPark AI Agent Skill - Archive decompression security validator neutralizing Zip Slip and Tar Slip path traversal escapes.

GenPark AI Agent Skill - Zero-dependency IP/CIDR egress packet validator restricting agent outbound traffic to trusted registries.

GenPark AI Agent Skill - Generates least-privilege Linux Seccomp BPF syscall filter profiles and blocks prohibited socket/ptrace operations.

GenPark AI Agent Skill - Resource governor enforcing strict cgroup v2 CPU bandwidth quotas, wall-clock timeouts and memory OOM tripwires.

GenPark AI Agent Skill - Archive decompression security validator neutralizing Zip Slip and Tar Slip path traversal escapes.

GenPark AI Agent Skill - Resource governor enforcing strict cgroup v2 CPU bandwidth quotas, wall-clock timeouts and memory OOM tripwires.

GenPark AI Agent Skill - Zero-dependency IP/CIDR egress packet validator restricting agent outbound traffic to trusted registries.

GenPark AI Agent Skill - In-memory virtual filesystem with copy-on-write (COW) branching, revision rollback and snapshot isolation.

GenPark AI Agent Skill - In-memory virtual filesystem with copy-on-write (COW) branching, revision rollback and snapshot isolation.

GenPark AI Agent Skill - Generates least-privilege Linux Seccomp BPF syscall filter profiles and blocks prohibited socket/ptrace operations.

Inspect container images to detect Java, Node.js and .NET binaries that are not compatible with cgroups v2 on OpenShift clusters.

Async child-process management for Python: kernel-backed, no-orphan process trees — nothing your subprocesses spawn outlives your program.

An automated Kubernetes (k3s) benchmarking framework that evaluates container runtime performance between Linux and WebAssembly. Features configuration via YAML, Python orchestration, streamlined Docker containerization, cgroup v2 resource monitoring, and a C-based matrix multiplication workload.

An art installation: a language model runs on a small computer while the computer is taken away from it, piece by piece, until it dies. Built on a Raspberry Pi 4, now moving to a badge and an ESP32.

Lightweight KVM/libvirt management platform with cgroups v2 resource pools, real-time WebSocket task notifications, and automated agent deployment.