For eine rootless Container-Engine, the strongest matches are containers/podman (Podman is a daemonless, rootless container engine that runs), youki-dev/youki (Youki is a low-level OCI-compliant container runtime that supports) and containers/libpod (Libpod is the OCI-compliant container management library that powers). termux/proot-distro is also worth a look. Each is ranked by relevance to your query, popularity and recent activity.
Open-Source-Tools und Runtimes entdecken, die die Ausführung von Containern ohne Root- oder erweiterte Privilegien ermöglichen.
Podman is a container engine designed for managing containerized applications and images without the need for a persistent background daemon. By utilizing a fork-exec process model, it executes container management commands as direct child processes of the host system, ensuring that container lifecycles are handled through standard host-level process control. The project distinguishes itself through a focus on rootless security and cross-platform compatibility. It employs user namespace mapping to allow unprivileged users to manage isolated workloads without requiring administrative system ac
Podman is a daemonless, rootless container engine that runs OCI containers without privileges, supports Docker CLI compatibility, rootless networking, and image building, making it the ideal rootless alternative to Docker.
Youki is a low-level container runtime written in Rust that creates and manages isolated containers according to Open Container Initiative specifications. It serves as an execution engine that can function as a rootless container manager or a pluggable Kubernetes CRI runtime to manage pods and containers within a cluster. The project distinguishes itself by providing a Wasm container runtime capable of executing WebAssembly modules as isolated workloads compatible with standard orchestration tools. It further supports a rootless execution model, allowing isolated environments to start as non-
Youki is a low-level OCI-compliant container runtime that supports rootless execution, directly matching the need for a rootless container engine, though it does not include Docker CLI compatibility or built-in image building.
Libpod is a container management library for running and controlling the lifecycle of Open Container Initiative compliant containers and images across different storage backends. It provides a programmatic interface for the remote control and automation of container environments. The project enables the coordination of multiple containers into pods that share network namespaces and other shared resources. It supports rootless container execution by using user namespaces to launch containers without administrative privileges. The library covers a broad range of system operations, including im
Libpod is the OCI-compliant container management library that powers Podman, providing rootless execution via user namespaces and a daemonless architecture, which directly matches the core requirement for a rootless container engine — though you would typically interact through Podman's CLI rather than the library itself.
proot-distro is a rootless container runtime and Linux distribution manager that allows users to install and run isolated guest environments without requiring administrative root privileges. It utilizes PRoot to simulate root access and filesystem redirection, enabling the deployment of full Linux distributions in a non-root space. The project functions as an OCI container image handler, capable of building, pulling, and pushing OCI-compatible images and manifests. It further serves as a cross-architecture execution layer, utilizing user-mode emulation to run binaries and containers built for
proot-distro is a rootless container engine that uses PRoot to run isolated Linux environments and handles OCI images, but its runtime is based on PRoot rather than a standard OCI runtime, and it lacks Docker CLI compatibility and rootless networking.