Tech News
← Home  ·  All topics

Cgroup V2

2 GoKawiil briefs on this topic

New open-source tool Corral guarantees full cleanup of agent-spawned processes

A developer released Corral, a Linux command-line tool that runs a shell command with a time limit and ensures every process it spawned, including detached daemons, is terminated before returning. It uses cgroup v2's cgroup.kill for guaranteed cleanup when available, or acts as a child subreaper tracking processes via /proc and pidfds otherwise, and exits with code 120 if it cannot verify a clean kill. The tool requires Linux 5.11 or later, with 5.14 needed for its enforced cgroup mode, and is not intended as a security sandbox.

Kern launches as a 1.5 MB daemonless container runtime for untrusted code

Kern is a new open-source tool that runs rootless, kernel-enforced containers from a single 1.52 MB static binary, with no background daemon or socket required. It can pull and build OCI images, launch a sandboxed shell in about 3.5 milliseconds, and apply CPU, memory, disk and device limits either inside a sandbox or directly to processes on the host via named resource profiles set in a kern.toml file.