What are the main features of includeos/includeos?

The main features of includeos/includeos are: Unikernel Build Toolchains, Unikernels, Virtual Machines, Minimal Runtime Footprints, Linux Compatibility Layers, Unikernel Compatibility Layers, Minimal Base Images, Serverless Runtimes.

IncludeOS - run unikernels in virtual machines

IncludeOS is a unikernel operating system that bundles application code with only the necessary kernel drivers into a single bootable image. It functions as a resource-efficient cloud service virtual machine and a lightweight serverless runtime environment designed to minimize memory footprints and boot times.

The project provides a Linux compatibility layer via a C library, allowing applications written for Linux to be compiled and executed within the unikernel environment. It also serves as a network appliance framework for building high-performance firewalls and load balancers using configurable TCP/IP stacks.

Broad capabilities include the creation of minimal machine images for deployment on hypervisors such as KVM, Qemu, and VMware, as well as the hardening of embedded IoT devices by preventing runtime reconfiguration. The system supports rapid service startup to optimize serverless cold starts and utilizes non-preemptive scheduling to maintain predictable latency.

Features

Unikernel Build Toolchains - Combines application code and minimal OS functionality at link-time to create resource-efficient unikernel virtual machines.
Unikernels - Builds minimal bootable unikernel images that combine application code with necessary OS functions for efficient cloud deployment.
Virtual Machines - Provides resource-efficient machine images designed to run as specialized guests on hypervisors like KVM, Qemu, and VMware.
Minimal Runtime Footprints - Reduces initial loading latency by utilizing a minimal disk and memory footprint for rapid application startup.
Linux Compatibility Layers - Provides a compatibility layer that allows Linux-targeted applications to be compiled and run with minimal changes.
Unikernel Compatibility Layers - Ships a C library that allows Linux-written applications to be compiled and executed within a unikernel environment.
Minimal Base Images - Creates small, bootable images by bundling services with a minimal operating system at link-time.
Serverless Runtimes - Functions as a lightweight runtime environment that minimizes memory footprints and boot times for cloud workloads.
Network Appliance Frameworks - Provides a modular system for building high-performance firewalls and load balancers with configurable TCP/IP stacks.
Boot Sequence Bypasses - Bypasses standard operating system boot sequences to start virtualized services in milliseconds.
C Libraries - Provides a minimal C standard library implementation to enable Linux applications to run within the unikernel environment.
TCP/IP Stacks - Implements a configurable and modular TCP/IP stack tailored for minimal cloud services.
Virtual Machine Image Construction - Compiles and packages service binaries into bootable disk images tailored for specific hypervisors.
Linux Compatibility Layers - Allows existing Linux applications to run in a minimal virtualized environment using a compatibility C library.
Integrated Security Appliances - Provides a framework for building high-performance network appliances like firewalls and load balancers.
Kernel Image Linking - Combines application code and minimal operating system functions into a single bootable binary during the final linking phase.
Dynamic Application Updates - Supports upgrading running services without requiring a reboot or incurring downtime.
Hypervisor Deployment Targets - Runs as a specialized image across various hypervisors including KVM, Qemu, VirtualBox, and VMware ESXi.
Runtime Hardening - Secures IoT hardware by preventing runtime operating system reconfiguration to protect devices in open networks.
DMA-Capable Drivers - Implements DMA-capable drivers for network and disk I/O to maximize throughput and reduce CPU overhead.
Single-Address-Space Operating Systems - Runs applications and system services in a shared memory space to eliminate context-switching overhead.
Non-Preemptive Scheduling - Utilizes non-preemptive scheduling to ensure predictable latency and eliminate jitter.
Cold Start Optimizations - Reduces serverless cold start latency by packaging application code into minimal, fast-booting images.
IoT Security Hardening - Hardens embedded IoT devices by preventing runtime reconfiguration of the operating system.
Network Traffic Filtering - Provides firewall capabilities to control incoming and outgoing network packets based on defined rules.
Hypervisor Abstractions - Tailors the boot sequence and hardware abstraction layer for compatibility with various cloud hypervisors.
Deterministic Execution Latencies - Eliminates process preemption to maintain consistent response times and minimize jitter on physical hardware.

cloudius-systems/osv

4,253View on GitHub

OSV is a unikernel operating system and cloud-native execution environment designed to run as a secure microVM on hypervisors such as KVM, Firecracker, Xen, and VMware. It functions as a Linux binary compatible runtime, allowing unmodified Linux binaries to be executed as secure microVMs without requiring recompilation. The project distinguishes itself through its ability to package applications into minimal bootable images and its provide of a virtual machine management API. This REST interface enables remote monitoring of system health, management of execution traces, and control over guest

unikraft/unikraft

3,733View on GitHub

Unikraft is a modular library operating system and unikernel framework designed to compile applications into minimal, bootable virtual machine images. It serves as an OCI-compliant image builder and a cloud-native hypervisor target, enabling the creation of specialized runtimes that include only the specific drivers and libraries required by a single application. The system features a Linux compatibility layer that maps standard API calls and POSIX standards to unikernel libraries, allowing unmodified binaries to run without a full general-purpose kernel. It distinguishes itself by allowing c

chef/bento

4,423View on GitHub

Bento is a system for defining, building, and distributing standardized, cross-platform virtual machine images and base boxes. It functions as a virtual machine image builder that automates the creation of images using declarative configuration templates. The project provides a pipeline for building, testing, and publishing images to a cloud registry. This workflow utilizes a collection of templates to generate minimal, standardized base boxes across multiple operating systems. The system covers image automation via template-based generation and validation tools for testing built images agai

microvm.nix is a declarative virtual machine manager and orchestrator for defining, building, and managing isolated guest environments using Nix. It functions as a virtual machine image builder that transforms system specifications into bootable disk images and runner scripts. The project provides a hypervisor abstraction layer, enabling the deployment of guest images across multiple virtualization backends through a unified configuration. It includes specialized tools for PCI hardware passthrough, granting virtual machines direct access to physical host USB and PCI devices. The framework co

includeosIncludeOS

IncludeOS

Features

Open-source alternatives to IncludeOS

cloudius-systems/osv

unikraft/unikraft

chef/bento

Frequently asked questions

Star history

Frequently asked questions

Open-source alternatives to IncludeOS

cloudius-systems/osv

unikraft/unikraft

chef/bento

microvm-nix/microvm.nix