Youki is an OCI container runtime written in Rust. It implements the Open Container Initiative runtime specification to manage the lifecycle of containerized processes and ensure compatibility with standard container images and engines. The runtime is designed for memory safety and supports rootless container execution, allowing containers to run as non-root users to reduce security risks and limit privilege escalation. It provides core container management capabilities, including spawning and managing OCI containers. This is achieved through Linux namespace isolation, cgroup-based resource
rkt is a secure Linux container engine and pod-native container manager. It provides a composable execution environment for launching and managing isolated application containers on Linux, serving as a runtime designed around open industry standards for image formats and networking interfaces. The system is distinguished by a pod-native execution model that groups multiple containers and shared resources into single, self-contained units. It utilizes pluggable execution engines to provide secure isolation, including the use of hardware-based virtualization to create security boundaries betwee
Firecracker is a virtual machine monitor that leverages hardware-assisted virtualization to create and manage isolated execution environments. It functions as a lightweight runtime designed to launch virtual machines with minimal memory overhead and near-instantaneous startup times, providing the security of traditional hardware virtualization with the efficiency of containerized workloads. The project distinguishes itself through a security-focused architecture that enforces strict process boundaries using system-level barriers and restricted user privileges. It minimizes the attack surface
Libpod is a container management library for running and controlling the lifecycle of Open Container Initiative compliant containers and images across different storage backends. It provides a programmatic interface for the remote control and automation of container environments. The project enables the coordination of multiple containers into pods that share network namespaces and other shared resources. It supports rootless container execution by using user namespaces to launch containers without administrative privileges. The library covers a broad range of system operations, including im
.. image:: https://travis-ci.org/01org/cc-oci-runtime.svg?branch=master :target: https://travis-ci.org/01org/cc-oci-runtime
01org/cc-oci-runtime 的主要功能包括：Container Engines。
01org/cc-oci-runtime 的开源替代品包括： containers/youki — Youki is an OCI container runtime written in Rust. It implements the Open Container Initiative runtime specification… coreos/rkt — rkt is a secure Linux container engine and pod-native container manager. It provides a composable execution… firecracker-microvm/firecracker — Firecracker is a virtual machine monitor that leverages hardware-assisted virtualization to create and manage isolated… google/lmctfy — lmctfy (pronounced l-m-c-t-fi, IPA: /ɛlɛmsitifаɪ/) is the open source version of Google’s container stack, which… hyperhq/runv — runV is a hypervisor-based runtime for OCI. containers/libpod — Libpod is a container management library for running and controlling the lifecycle of Open Container Initiative…