Youki

Youki هو وقت تشغيل حاوية OCI مكتوب بلغة Rust. ينفذ مواصفات وقت تشغيل مبادرة الحاوية المفتوحة (OCI) لإدارة دورة حياة العمليات الحاوية وضمان التوافق مع صور ومحركات الحاويات القياسية.

تم تصميم وقت التشغيل لسلامة الذاكرة ويدعم تنفيذ الحاوية بدون جذر (Rootless)، مما يسمح للحاويات بالعمل كمستخدمين غير جذريين لتقليل مخاطر الأمان والحد من تصعيد الامتيازات.

يوفر قدرات أساسية لإدارة الحاويات، بما في ذلك إنشاء وإدارة حاويات OCI. يتم تحقيق ذلك من خلال عزل مساحة اسم Linux، وتحديد الموارد القائم على cgroup، وتعيين مساحة اسم المستخدم لتقسيم العمليات عن نظام التشغيل المضيف.

Features

OCI Container Process Management - Implements the OCI runtime specification to manage the complete lifecycle of containerized processes.
Container Runtimes - Serves as an OCI-compliant container runtime for executing isolated application workloads.
OCI Runtime Implementations - Adheres to the Open Container Initiative specifications to ensure compatibility across container engines.
Namespace-Based Isolation - Utilizes Linux kernel namespaces to isolate network, mount, and process views from the host.
System Call Interfaces - Directly invokes Linux kernel system calls to handle process spawning and root filesystem pivoting.
Rootless Container Runtimes - Provides a runtime environment that allows containers to run without requiring root privileges on the host.
User Namespace Mappings - Maps container root users to non-privileged host users to enable rootless container execution.
Memory Safety - Leverages Rust's ownership model to ensure memory safety during low-level kernel interactions.
Rust Systems Programming - Uses Rust for systems programming to provide a high-performance, memory-safe container runtime.
Container Runtimes - Implements a systems-level container runtime using Rust for enhanced memory safety and performance.
Container Cgroup Resource Limits - Implements cgroup-based resource limits to restrict CPU, memory, and I/O consumption for containers.
Container Engines - Container runtime implementation written in Rust.
runc - Listed in the “runc” section of the Awesome Alternatives In Rust awesome list.

سجل النجوم

containersyouki

Name: containers/youki
Author: containers

View on GitHub

7,463 نجوم442 تفرعاتRustApache-2.014 مشاهداتyouki-dev.github.io/youki

Youki

Features

OCI Container Process Management - Implements the OCI runtime specification to manage the complete lifecycle of containerized processes.
Container Runtimes - Serves as an OCI-compliant container runtime for executing isolated application workloads.
OCI Runtime Implementations - Adheres to the Open Container Initiative specifications to ensure compatibility across container engines.
Namespace-Based Isolation - Utilizes Linux kernel namespaces to isolate network, mount, and process views from the host.
System Call Interfaces - Directly invokes Linux kernel system calls to handle process spawning and root filesystem pivoting.
Rootless Container Runtimes - Provides a runtime environment that allows containers to run without requiring root privileges on the host.
User Namespace Mappings - Maps container root users to non-privileged host users to enable rootless container execution.
Memory Safety - Leverages Rust's ownership model to ensure memory safety during low-level kernel interactions.
Rust Systems Programming - Uses Rust for systems programming to provide a high-performance, memory-safe container runtime.
Container Runtimes - Implements a systems-level container runtime using Rust for enhanced memory safety and performance.
Container Cgroup Resource Limits - Implements cgroup-based resource limits to restrict CPU, memory, and I/O consumption for containers.
Container Engines - Container runtime implementation written in Rust.
runc - Listed in the “runc” section of the Awesome Alternatives In Rust awesome list.

بدائل مفتوحة المصدر لـ Youki

مشاريع مفتوحة المصدر مشابهة، مرتبة حسب عدد الميزات المشتركة مع Youki.

containers/crun
containers/crun
3,975عرض على GitHub
crun is a low-level container runtime that implements the Open Container Initiative specification for managing the lifecycle of isolated processes. It provides the core mechanisms for container creation, execution, and deletion, ensuring compatibility across platforms through standardized lifecycle management. The project distinguishes itself by offering a shared C library that allows container runtime operations to be embedded directly into other compiled applications. It further extends execution capabilities through specialized handlers that enable the deployment of containers within isola
Ccontainersiotiot-cloud
عرض على GitHub3,975
opencontainers/runtime-spec
opencontainers/runtime-spec
3,641عرض على GitHub
The project provides an open container runtime specification and standardized schema for defining container configurations, namespaces, resource limits, security policies, and filesystem mounts across platforms. It outlines the formal configuration formats, lifecycle operations, and execution environments necessary for portable, isolated container workloads. The specification covers container lifecycle management protocols and structured rules governing container creation, execution startup, process signaling, state tracking, and resource teardown. It standardizes local bundle packaging and
Gocontainersdockeroci
عرض على GitHub3,641
youki-dev/youki
youki-dev/youki
7,452عرض على GitHub
Youki is a low-level container runtime written in Rust that creates and manages isolated containers according to Open Container Initiative specifications. It serves as an execution engine that can function as a rootless container manager or a pluggable Kubernetes CRI runtime to manage pods and containers within a cluster. The project distinguishes itself by providing a Wasm container runtime capable of executing WebAssembly modules as isolated workloads compatible with standard orchestration tools. It further supports a rootless execution model, allowing isolated environments to start as non-
Rustcontainersdockerkubernetes
عرض على GitHub7,452
lxc/incus
lxc/incus
4,893عرض على GitHub
Incus is a unified orchestration platform for managing system containers, OCI application containers, and virtual machines through a single control plane. It brings together cluster infrastructure management, secure multi-tenancy, software-defined networking, and pluggable storage backend orchestration into one cohesive system exposed via a full REST API and command-line interface. What distinguishes Incus is its ability to run multiple instance types side by side—full Linux system containers, OCI application containers, and QEMU virtual machines—all managed with consistent tooling. Networkin
Gocloudcontainershacktoberfest
عرض على GitHub4,893

عرض جميع البدائل الـ 30 لـ Youki

الأسئلة الشائعة

ما هي وظيفة containers/youki؟

ما هي الميزات الرئيسية لـ containers/youki؟

الميزات الرئيسية لـ containers/youki هي: OCI Container Process Management, Container Runtimes, OCI Runtime Implementations, Namespace-Based Isolation, System Call Interfaces, Rootless Container Runtimes, User Namespace Mappings, Memory Safety.

ما هي البدائل مفتوحة المصدر لـ containers/youki؟

تشمل البدائل مفتوحة المصدر لـ containers/youki: containers/crun — crun is a low-level container runtime that implements the Open Container Initiative specification for managing the… opencontainers/runtime-spec — The project provides an open container runtime specification and standardized schema for defining container… youki-dev/youki — Youki is a low-level container runtime written in Rust that creates and manages isolated containers according to Open… lxc/incus — Incus is a unified orchestration platform for managing system containers, OCI application containers, and virtual… opencontainers/runc — runc is a command-line utility for spawning and running containers on Linux systems according to the Open Container… lxc/lxc — LXC is an OS-level virtualization framework and Linux container manager used to run multiple isolated Linux systems on…