3,260
stars
+0+2+291
185
forks
33
watchers
683
prs
162
issues
1
releases
–
discussions

README

LiteBox

 A security-focused library OS

 [!NOTE]  
 This project is currently actively evolving and improving. While we are
 working toward a stable release, some APIs and interfaces may change as the
 design continues to mature. You are welcome to explore and experiment, but if
 you need long-term stability, it may be best to wait for a stable release, or
 be prepared to adapt to updates along the way.

LiteBox is a sandboxing library OS that drastically cuts down the interface to the host, thereby reducing attack surface.  It focuses on easy interop of various "North" shims and "South" platforms.  LiteBox is designed for usage in both kernel and non-kernel scenarios.

LiteBox exposes a Rust-y nix/rustix-inspired "North" interface when it is provided a Platform interface at its "South".  These interfaces allow for a wide variety of use-cases, easily allowing for connection between any of the North--South pairs.

Example use cases include:
- Running unmodified Linux programs on Windows
- Sandboxing Linux applications on Linux
- Run programs on top of SEV SNP
- Running OP-TEE programs on Linux
- Running on LVBS

!LiteBox and related projects

 Contributing

See the following files for details:

- CONTRIBUTING.md
- CODE_OF_CONDUCT.md
- SECURITY.md
- SUPPORT.md

 License

MIT License.  See ./LICENSE for details.

 Trademarks

This project may contain trademarks or logos for projects, products, or services. Authorized use of Microsoft 
trademarks or logos is subject to and must follow 
Microsoft's Trademark & Brand Guidelines.
Use of Microsoft trademarks or logos in modified versions of this project must not cause confusion or imply Microsoft sponsorship.
Any use of third-party trademarks or logos are subject to those third-party's policies.

Snapshot: 2026-11-04T14:00:00Z · Data license Apache-2.0 · JSON