aurae-runtime/aurae
Aurae
Aurae is a memory-safe distributed systems runtime daemon written in Rust that acts as a container and process orchestrator. It manages and schedules workloads, containers, and virtual machines across distributed infrastructure nodes using remote procedure calls and isolated kernel-level boundaries.
The platform provides a mutual transport-layer security gateway that enforces cryptographic identity and socket-level authentication across distributed infrastructure. It includes enterprise workload isolation features to secure control planes and manage multi-tenant processes on host operating systems using kernel-level structures.
Additional capabilities include infrastructure automation scripting with an embedded Turing-complete language for executing custom automation pipelines and interacting directly with running systems. The project also provides tooling to test workflows locally using container tools before pushing configuration changes.
Features
- Distributed Daemon Orchestration - Acts as a memory-safe distributed systems runtime daemon for scheduling workloads and managing infrastructure across nodes.
- Distributed Runtimes - Acts as a memory-safe distributed systems runtime daemon managing workloads across nodes.
- Workload Orchestration and Scheduling - Deploys and orchestrates containers and virtual machines across distributed infrastructure.
- Unified Container and VM Orchestration - Orchestrates and manages containers, virtual machines, and fundamental system processes.
- Workload Scheduling - Schedules fundamental system processes and executable workloads remotely across distributed nodes.
- Workload Isolation - Applies workload isolation techniques to secure control planes and multi-tenant processes.
- Host Process Spawning - Spawns and manages host processes inside isolated kernel-level boundaries.
- Process Isolation - Isolates node-level system processes and nested runtimes using kernel-level structures.
- Mutual TLS Authentication - Enforces mutual TLS authentication to secure socket-layer communication across distributed nodes.
- Mutual TLS Authentication - Enforces cryptographic identity and socket-level authentication across distributed infrastructure using mutual TLS.
- Socket Security Layers - Protects system sockets and enforces workload identity at the transport layer.
- Node Configurations - Configures target node settings while deploying memory-safe runtime daemons.
- Infrastructure Automation Scripts - Executes custom automation pipelines using an embedded Turing-complete scripting language.
- Embedded Script Execution - Embeds a Turing-complete scripting runtime directly into the system daemon for automation.
- System Scripting Languages - Provides system scripting language capabilities to interact directly with running infrastructure.
