Grates Implementation Tracker

[stupendoussuperpowers]

This is a progress tracker for example grates from the wishlist on Lind-Project/lind-wasm#65

Basic Examples

• geteuid grate (C) Add a basic README + geteuid_grate example for documentation #3
• grate-rs usage examples.

Filesystems

• In-Memory Filesystem (C): Add Example Grate: In Memory File System #4
• In-Memory Filesystem (Rust + fdtables) Rust: IMFS Grate #49
• chroot Chroot Grate #9
• /dev/null /dev/null grate #25
• /tmp: Virtualized /tmp directories tmp grate #42
• FS Namespaces Filesystem Namespace Grate #7
• FS Caching
• Network File System
• Read-only grate readonly-grate #39
• Write Filter grate Write filter grate #40
• FS Resource Limiting Grate FS: Resource limiting grate. #58

Tracing and IPC

• In-Memory IPC iPC grate #36
• Syscall Tracing (strace) (C): add C strace-grate #24
• strace (Rust): Rust strace Grate #13
• witness: Witness grate #37

Sandboxing

• Syscall whitelists (seccomp) seccomp grate #38
• Dynamic seccomp policies
• Seal grate Seal grate #41

Networking

• mTLS mTLS grate #35
• TLS proxy

Input Validation

• Malicious input detection (e.g. blocking zero-day triggers) Malicious Input Detection Grate #12
• AV-style scanning and sanitization

---

If you're working on any of these grates (or a new grate not listed here), please create a sub-issue describing the expected features, scope of implementation, and any relevant context.