Package arch provides abstractions around architecture-dependent details, such as syscall calling conventions, native types, etc.

Package control contains types that expose control server methods, and can be used to configure and interact with a running sandbox process.

Package fdimport provides the Import function.

Package fsmetric defines filesystem metrics.

Package fsutil provides utilities for implementing vfs.FileDescriptionImpl and vfs.FilesystemImpl.

Package hostcpu provides utilities for working with CPU information provided by a host Linux kernel.

Package hostfd provides efficient I/O with host file descriptors.

Package hostmm provides tools for interacting with the host Linux kernel's virtual memory management subsystem.

Package inet defines semantics for IP stacks.

Package kernel provides an emulation of the Linux kernel.

Package limits provides resource limits.

Package loader loads an executable file into a MemoryManager.

Package memmap defines semantics for memory mappings.

Package mm provides a memory management subsystem.

Package pgalloc contains the page allocator subsystem, which manages memory that may be mapped into application address spaces.

Package platform provides a Platform abstraction.

Package seccheck defines a structure for dynamically-configured security checks in the sentry.

Package socket provides the interfaces that need to be provided by socket implementations and providers, as well as per family demultiplexing of socket creation.

Package state provides high-level state wrappers.

Package strace implements the logic to print out the input and the return value of each traced syscall.

Package syscalls is the interface from the application to the kernel.

Package time provides a calibrated clock synchronized to a system reference clock.

Package unimpl contains interface to emit events about unimplemented features.

Package uniqueid defines context.Context keys for obtaining system-wide unique identifiers.

Package usage provides representations of resource usage.

Package vfs implements a virtual filesystem layer.

Package watchdog is responsible for monitoring the sentry for tasks that may potentially be stuck or looping inderterminally causing hard to debug hungs in the untrusted app.