aero
kata-containers
Our great sponsors
aero | kata-containers | |
---|---|---|
12 | 11 | |
1,086 | 4,877 | |
- | 4.3% | |
8.9 | 10.0 | |
11 days ago | 5 days ago | |
Rust | Rust | |
GNU General Public License v3.0 only | Apache License 2.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
aero
-
Maestro: A Linux-compatible kernel in Rust
This feels like an ad; the blog post and the README feel like they were written to sound complicated and smart rather than tell the whole truth. Like, "On boot, the kernel has full access to the memory and is allowed to write where it should not (its own code, for example)"? Apart from the fact that ring 0 will always have full control, the MMU also exists. Also, the "48k" (the kernel has 34324 lines of non-comment code, the rest are in the other repos I assume) LOC are obvious when you consider code like src/syscall/mod.rs:717 is present.
To be fair, this is impressive, but its a basic monolithic kernel written for a school project, with the "twist" that it is in Rust and uses Linux syscalls.
For anyone who is interesting in more Rust UNIX-like kernels, Aero (https://github.com/Andy-Python-Programmer/aero) is farther ahead supports running quite a lot of recompiled Linux userspace, including dwm and WebKit.
-
Aero OS: A new modern operating system made in Rust, now able to run the Links browser, Alacritty and much more!
https://github.com/Andy-Python-Programmer/aero/blob/master/src/aero_kernel/src/mem/paging/addr.rs especially obvious, if you look at the first version of this file:
-
Aero, a new modern OS made in rust and is now able to run Xorg! :)
There is progress in implementing the DRM subsystem (cc https://github.com/Andy-Python-Programmer/aero/blob/master/src/aero_kernel/src/drivers/drm/mod.rs) but currently it only implements a small portion of the subsystem. But yea, this was one of the blocking points.
- Your one project with rust that you think is one of the best projects you have made.
-
Software Development Foundations - How to teach a 14 year old?
Get him to join the OSDev discord chat. Most of the people there started learning programming in the middle of the pandemic and are now building complex projects. Group is mostly kids his age, 12-16 year olds, learning to hack around. Like this 13 year old or this 15 year old.
- Aero: An experimental, Unix-like OS written in Rust
-
Aero is a new modern, experimental, unix-like operating system made in rust!
you can compare with initial commit: https://github.com/Andy-Python-Programmer/aero/commit/3ee1c052454a1386dc8d1688b5ca9d616e3a907b
kata-containers
- Maestro: A Linux-compatible kernel in Rust
-
Fly Kubernetes
Seems like Fly.io Machines are trying reimplement Kata Containers with the Firecracker backend [0].
Kata has a guest image and guest agent to run multiple isolated containers [1].
[0] https://katacontainers.io/
[1] https://github.com/kata-containers/kata-containers/blob/main...
-
Kata Containers: Virtual Machines (VMs) that feel and perform like containers
> Last time I looked (a few months ago), the documentation was pretty sparse or outdated.
It still is, though it works somewhat seamlessly when installing with https://github.com/kata-containers/kata-containers/blob/main...
Though only one of the hypervisors works well.
-
Method to block possible internet traffic from LLaMA on MacOS
Better to use a secure VM, can even get container-like VMs with kata-containers
-
Kata Containers vs gVisor?
As I understand,Kata Containers
-
Firecracker MicroVMs
Kubernetes using Kata containers as a containerd backend
https://github.com/kata-containers/kata-containers/blob/main...
-
Container security best practices: Ultimate guide
My home k8s cluster is now "locked down" using micro-vms (kata-containers[0]), pod level firewalling (cilium[1]), permission-limited container users, and mostly immutable environments. Given how quickly I rolled this out; the tools to enhance cluster environment security seem more accessible now than my previous research a few years ago.
I know it's not exactly a production setup, but I really do feel that it's the most secure runtime environment I've ever had accessible at home. Probably more so than my desktops, which you could argue undermines most of my effort, but I like to think I'm pretty careful.
In the beginning I was very skeptical, but being able to just build a docker/OCI image and then manage its relationships with other services with "one pane of glass" that I can commit to git is so much simpler to me than my previous workflows. My previous setup involved messing with a bunch of tools like packer, cloud-init, terraform, ansible, libvirt, whatever firewall frontend was on the OS, and occasionally sshing in for anything not covered.
[0] https://github.com/kata-containers/kata-containers
-
Docker Without Docker
I'm really impressed by fly.io, and the candidness with which they share some of their really awesome technology. Being container-first is the next step for PaaS IMO and they are ahead of the pack.
I aim to build a platform like theirs someday (probably not any time soon) but I don't think I'd do any of what they're doing -- it feels unnecessary. Bear with me as I recently learned that they use nomad[0] and some of these suggestions are kubernetes projects but I'd love to hear why the following technologies were decided against (if they were):
- kata-containers[1] (it does the whole container -> VM flow for you, automatically, nemu, firecracker) with multiple VMM options[2]
- linuxkit[3] (let's say you didn't go with kata-containers, this is another container->VM path)
- firecracker-containerd[4] (very minimal keep-your-container-but-run-it-as-a-VM)
- kubevirt[5] (if you just want to actually run VMs, regardless of how you built them)
- Ceph[6] for storage -- make LVM pools and just give them to Ceph, you'll get blocks, distributed filesystems (CephFS), and object gateways (S3/Swift) out of it (in the k8s space Rook manages this)
As an aside to all this, there's also LXD, which supports running "system" (user namespace isolated) containers, VMs (somewhat recent[7][8]), live migration via criu[9], management/migration of underlying filesystems, runs on LVM or zfs[10], it's basically all-in-one, but does fall behind in terms of ecosystem since everyone else is aboard the "cloud native"/"works-with-kubernetes" train.
I've basically how I plan to run a service like fly.io if I ever did -- so maybe my secret is out, but I sure would like to know just how much of this fly.io got built on (if any of it), and/or what was turned down.
[0]: https://news.ycombinator.com/item?id=26745514
[1]: https://github.com/kata-containers/kata-containers
[2]: https://github.com/kata-containers/kata-containers/blob/2fc7...
[3]: https://github.com/linuxkit/linuxkit
[4]: https://github.com/firecracker-microvm/firecracker-container...
[5]: https://github.com/kubevirt/kubevirt
[6]: https://docs.ceph.com/
[7]: https://discuss.linuxcontainers.org/t/running-virtual-machin...
[8]: https://github.com/lxc/lxd/issues/6205
[9]: https://criu.org/Main_Page
[10]: https://linuxcontainers.org/lxd/docs/master/storage
-
Checking Your --privileged Container
Kata Containers https://github.com/kata-containers/kata-containers
What are some alternatives?
x86_64 - Library to program x86_64 hardware.
firecracker-containerd - firecracker-containerd enables containerd to manage containers as Firecracker microVMs
ngs - Next Generation Shell (NGS)
kubevirt - Kubernetes Virtualization API and runtime in order to define and manage virtual machines.
ferium - Fast and multi-source CLI program for managing Minecraft mods and modpacks from Modrinth, CurseForge, and Github Releases [Moved to: https://github.com/gorilla-devs/ferium]
lxd - Powerful system container and virtual machine manager [Moved to: https://github.com/canonical/lxd]
oil - Oils is our upgrade path from bash to a better language and runtime. It's also for Python and JavaScript users who avoid shell!
sysbox - An open-source, next-generation "runc" that empowers rootless containers to run workloads such as Systemd, Docker, Kubernetes, just like VMs.
album-art-wallpaper - An app for Windows that will change your desktop wallpaper to the album art of the song you are listening to.
gvisor - Application Kernel for Containers
WingOS - a little 64bit operating system written in c++ with smp support
ignite - Ignite a Firecracker microVM