Youki

Youki este un runtime de containere OCI scris în Rust. Acesta implementează specificația de runtime Open Container Initiative pentru a gestiona ciclul de viață al proceselor containerizate și a asigura compatibilitatea cu imaginile și motoarele de containere standard.

Runtime-ul este conceput pentru siguranța memoriei și suportă execuția containerelor rootless, permițând containerelor să ruleze ca utilizatori non-root pentru a reduce riscurile de securitate și a limita escaladarea privilegiilor.

Oferă capabilități de bază de gestionare a containerelor, inclusiv crearea și gestionarea containerelor OCI. Acest lucru este realizat prin izolarea namespace-urilor Linux, limitarea resurselor bazată pe cgroup și maparea namespace-urilor de utilizator pentru a partiționa procesele de sistemul de operare gazdă.

Features

OCI Container Process Management - Implements the OCI runtime specification to manage the complete lifecycle of containerized processes.
Container Runtimes - Serves as an OCI-compliant container runtime for executing isolated application workloads.
OCI Runtime Implementations - Adheres to the Open Container Initiative specifications to ensure compatibility across container engines.
Namespace-Based Isolation - Utilizes Linux kernel namespaces to isolate network, mount, and process views from the host.
System Call Interfaces - Directly invokes Linux kernel system calls to handle process spawning and root filesystem pivoting.
Rootless Container Runtimes - Provides a runtime environment that allows containers to run without requiring root privileges on the host.
User Namespace Mappings - Maps container root users to non-privileged host users to enable rootless container execution.
Memory Safety - Leverages Rust's ownership model to ensure memory safety during low-level kernel interactions.
Rust Systems Programming - Uses Rust for systems programming to provide a high-performance, memory-safe container runtime.
Container Runtimes - Implements a systems-level container runtime using Rust for enhanced memory safety and performance.
Container Cgroup Resource Limits - Implements cgroup-based resource limits to restrict CPU, memory, and I/O consumption for containers.
Container Engines - Container runtime implementation written in Rust.
runc - Listed in the “runc” section of the Awesome Alternatives In Rust awesome list.

Istoric stele

containersyouki

Name: containers/youki
Author: containers

View on GitHub

7,463 stele442 fork-uriRustApache-2.013 vizualizăriyouki-dev.github.io/youki

Youki

Features

OCI Container Process Management - Implements the OCI runtime specification to manage the complete lifecycle of containerized processes.
Container Runtimes - Serves as an OCI-compliant container runtime for executing isolated application workloads.
OCI Runtime Implementations - Adheres to the Open Container Initiative specifications to ensure compatibility across container engines.
Namespace-Based Isolation - Utilizes Linux kernel namespaces to isolate network, mount, and process views from the host.
System Call Interfaces - Directly invokes Linux kernel system calls to handle process spawning and root filesystem pivoting.
Rootless Container Runtimes - Provides a runtime environment that allows containers to run without requiring root privileges on the host.
User Namespace Mappings - Maps container root users to non-privileged host users to enable rootless container execution.
Memory Safety - Leverages Rust's ownership model to ensure memory safety during low-level kernel interactions.
Rust Systems Programming - Uses Rust for systems programming to provide a high-performance, memory-safe container runtime.
Container Runtimes - Implements a systems-level container runtime using Rust for enhanced memory safety and performance.
Container Cgroup Resource Limits - Implements cgroup-based resource limits to restrict CPU, memory, and I/O consumption for containers.
Container Engines - Container runtime implementation written in Rust.
runc - Listed in the “runc” section of the Awesome Alternatives In Rust awesome list.

Alternative open-source pentru Youki

Proiecte open-source similare, clasificate după numărul de funcționalități comune cu Youki.

containers/crun
containers/crun
3,975Vezi pe GitHub
crun is a low-level container runtime that implements the Open Container Initiative specification for managing the lifecycle of isolated processes. It provides the core mechanisms for container creation, execution, and deletion, ensuring compatibility across platforms through standardized lifecycle management. The project distinguishes itself by offering a shared C library that allows container runtime operations to be embedded directly into other compiled applications. It further extends execution capabilities through specialized handlers that enable the deployment of containers within isola
Ccontainersiotiot-cloud
Vezi pe GitHub3,975
opencontainers/runtime-spec
opencontainers/runtime-spec
3,641Vezi pe GitHub
The project provides an open container runtime specification and standardized schema for defining container configurations, namespaces, resource limits, security policies, and filesystem mounts across platforms. It outlines the formal configuration formats, lifecycle operations, and execution environments necessary for portable, isolated container workloads. The specification covers container lifecycle management protocols and structured rules governing container creation, execution startup, process signaling, state tracking, and resource teardown. It standardizes local bundle packaging and
Gocontainersdockeroci
Vezi pe GitHub3,641
youki-dev/youki
youki-dev/youki
7,452Vezi pe GitHub
Youki is a low-level container runtime written in Rust that creates and manages isolated containers according to Open Container Initiative specifications. It serves as an execution engine that can function as a rootless container manager or a pluggable Kubernetes CRI runtime to manage pods and containers within a cluster. The project distinguishes itself by providing a Wasm container runtime capable of executing WebAssembly modules as isolated workloads compatible with standard orchestration tools. It further supports a rootless execution model, allowing isolated environments to start as non-
Rustcontainersdockerkubernetes
Vezi pe GitHub7,452
lxc/incus
lxc/incus
4,893Vezi pe GitHub
Incus is a unified orchestration platform for managing system containers, OCI application containers, and virtual machines through a single control plane. It brings together cluster infrastructure management, secure multi-tenancy, software-defined networking, and pluggable storage backend orchestration into one cohesive system exposed via a full REST API and command-line interface. What distinguishes Incus is its ability to run multiple instance types side by side—full Linux system containers, OCI application containers, and QEMU virtual machines—all managed with consistent tooling. Networkin
Gocloudcontainershacktoberfest
Vezi pe GitHub4,893

Vezi toate cele 30 alternative pentru Youki

Întrebări frecvente

Ce face containers/youki?

Care sunt principalele funcționalități ale containers/youki?

Principalele funcționalități ale containers/youki sunt: OCI Container Process Management, Container Runtimes, OCI Runtime Implementations, Namespace-Based Isolation, System Call Interfaces, Rootless Container Runtimes, User Namespace Mappings, Memory Safety.

Care sunt câteva alternative open-source pentru containers/youki?

Alternativele open-source pentru containers/youki includ: containers/crun — crun is a low-level container runtime that implements the Open Container Initiative specification for managing the… opencontainers/runtime-spec — The project provides an open container runtime specification and standardized schema for defining container… youki-dev/youki — Youki is a low-level container runtime written in Rust that creates and manages isolated containers according to Open… lxc/incus — Incus is a unified orchestration platform for managing system containers, OCI application containers, and virtual… opencontainers/runc — runc is a command-line utility for spawning and running containers on Linux systems according to the Open Container… lxc/lxc — LXC is an OS-level virtualization framework and Linux container manager used to run multiple isolated Linux systems on…