MarStack Labs

Popular repositories Loading

1. marstack-container marstack-container Public

   OCI container runtime written from scratch in Rust: a third less kernel attack surface than runc, container failures explained from kernel state, a drop-in Docker runtime

   Rust

2. marstack-cloud marstack-cloud Public

   Cloud platform for baremetal: container, VM, microVM and sandbox as one resource type, native routing without encapsulation, an agent that pulls

   Go

3. marstack-secrets marstack-secrets Public

   Secret and parameter store that boots sealed: envelope encryption bound to tenant, path and version, Shamir unsealing, default-deny policy, leases, an audit log it refuses to run without

   Go

4. marstack-access marstack-access Public

   Identity-aware access platform for Linux infrastructure: no standing credentials, tamper-evident audit, greppable sessions

   Go

5. .github .github Public

   Organization profile and shared GitHub configuration

   HTML

6. marstack-govern marstack-govern Public

   Multi-tenancy and governance for a shared Kubernetes cluster: requests that arrive filled in from usage, approvals that simulate their own consequence, attribution enforced at admission

   Go