bubblewrap VS crun

Compare bubblewrap vs crun and see what are their differences.

bubblewrap

Low-level unprivileged sandboxing tool used by Flatpak and similar projects (by containers)

crun

A fast and lightweight fully featured OCI runtime and C library for running containers (by containers)
Our great sponsors
  • InfluxDB - Power Real-Time Data Analytics at Scale
  • WorkOS - The modern identity platform for B2B SaaS
  • SaaSHub - Software Alternatives and Reviews
bubblewrap crun
75 30
3,557 2,727
1.6% 3.1%
6.7 9.3
8 days ago 7 days ago
C C
GNU General Public License v3.0 or later GNU General Public License v3.0 only
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.

bubblewrap

Posts with mentions or reviews of bubblewrap. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2024-02-03.

crun

Posts with mentions or reviews of crun. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2024-03-06.
  • Show HN: dockerc – Docker image to static executable "compiler"
    12 projects | news.ycombinator.com | 6 Mar 2024
    Yep pretty much.

    The executables bundle crun (a container runtime)[0], and a fuse implementation of squashfs and overlayfs. Appended to that is a squashfs of the image.

    At runtime the squashfs and overlayfs are mounted and the container is started.

    [0]: https://github.com/containers/crun

  • Howto: WASM runtimes in Docker / Colima
    5 projects | dev.to | 12 Jan 2024
    cpu: 4 disk: 60 memory: 12 arch: host hostname: colima autoActivate: true forwardAgent: false # I only tested this with 'docker', not 'containerd': runtime: docker kubernetes: enabled: false version: v1.24.3+k3s1 k3sArgs: [] network: address: true dns: [] dnsHosts: host.docker.internal: host.lima.internal # Added: # - containerd-snapshotter: true (meaning containerd will be used for pulling images) # - default-runtime / runtimes: crun (instead of the default 'runc') docker: default-runtime: crun features: buildkit: true containerd-snapshotter: true runtimes: crun: path: /usr/local/bin/crun vmType: vz rosetta: true mountType: virtiofs mountInotify: false cpuType: host # This provisioning script installs WasmEdge and builds crun with wasmedge support: provision: - mode: system script: | [ -f /etc/docker/daemon.json ] && echo "Already provisioned!" && exit 0 echo "Install system updates:" apt-get update -y apt-get upgrade -y echo "Install WasmEdge and crun dependencies:" # NOTE: packages curl git python3 already installed: apt-get install -y make gcc build-essential pkgconf libtool libsystemd-dev libprotobuf-c-dev libcap-dev libseccomp-dev libyajl-dev libgcrypt20-dev go-md2man autoconf automake criu apt-get clean -y - mode: user script: | [ -f /etc/docker/daemon.json ] && echo "Already provisioned!" && exit 0 echo "Installing WasmEdge:" curl -sSf https://raw.githubusercontent.com/WasmEdge/WasmEdge/master/utils/install.sh | sudo bash -s -- -p /usr/local echo echo "`wasmedge -v` installed!" # NOTE: I failed to Configure Wasmtime properly - turned off for now: #echo "Installing Wasmtime:" #curl -sSf https://wasmtime.dev/install.sh | bash #sudo cp .wasmtime/bin/* /usr/local/bin/ #rm -rf .wasmtime #echo "`wasmtime -V` installed!" echo "Install crun:" git clone https://github.com/containers/crun cd crun ./autogen.sh #./configure --with-wasmedge --with-wasmtime ./configure --with-wasmedge make sudo make install crun -v echo "crun installed! Replacing runc with crun:" # NOTE: replacing runc with runc is to simplify containerd config TRC=`which runc` sudo rm -rf $TRC sudo cp `which crun` $TRC echo "Configuring containerd:" sudo mkdir -p /etc/containerd/ containerd config default | sudo tee /etc/containerd/config.toml >/dev/null echo "Restarting/reloading docker/containerd services:" sudo systemctl daemon-reload sudo systemctl restart containerd # As soon as Colima writes its /etc/docker/daemon.json file (right after this provisioning script), # it will also start the Docker daemon. If we stop Docker here, the changes will actually take effect: sudo systemctl stop docker sshConfig: true mounts: [] env: {}
  • Google assigns a CVE for libwebp and gives it a 10.0 score
    5 projects | news.ycombinator.com | 26 Sep 2023
    On this note, I was really surprised to find Red Hat's OCI runtime is written in C: https://github.com/containers/crun

    Is anyone working on a Rust version?

  • US Cybersecurity: The Urgent Need for Memory Safety in Software Products
    3 projects | news.ycombinator.com | 21 Sep 2023
    It's interesting that, in light of things like this, you still see large software companies adding support for new components written in non-memory safe languages (e.g. C)

    As an example Red Hat OpenShift added support for crun(https://github.com/containers/crun) this year(https://cloud.redhat.com/blog/whats-new-in-red-hat-openshift...), which is written in C as an alternative to runc, which is written in Go(https://github.com/opencontainers/runc)...

  • Barco: Linux Containers from Scratch in C
    4 projects | news.ycombinator.com | 6 Aug 2023
  • Crun: Fast and lightweight OCI runtime and C library for running containers
    7 projects | news.ycombinator.com | 4 Jun 2023
    Kubernetes needs an OCI runtime to run containers with. Crun is one implementation it can use.

    Docker also appears to be able to use crun for it's engine as well. https://github.com/containers/crun/issues/37

    7 projects | news.ycombinator.com | 4 Jun 2023
  • Best virtualization solution with Ubuntu 22.04
    8 projects | /r/linuxquestions | 28 May 2023
    crun
  • Why did the Krustlet project die?
    6 projects | /r/kubernetes | 14 Jan 2023
  • Krunvm – Create MicroVMs from OCI Images
    7 projects | news.ycombinator.com | 13 Aug 2022
    It looks like crun already supports krun: https://github.com/containers/crun/blob/main/crun.1.md

What are some alternatives?

When comparing bubblewrap and crun you can also consider the following projects:

runc - CLI tool for spawning and running containers according to the OCI specification

firejail - Linux namespaces and seccomp-bpf sandbox

flatpak - Linux application sandboxing and distribution framework

youki - A container runtime written in Rust

cri-o - Open Container Initiative-based implementation of Kubernetes Container Runtime Interface

podman - Podman: A tool for managing OCI containers and pods.

flathub - Issue tracker and new submissions

nsjail - A lightweight process isolation tool that utilizes Linux namespaces, cgroups, rlimits and seccomp-bpf syscall filters, leveraging the Kafel BPF language for enhanced security.

distrobox - Use any linux distribution inside your terminal. Enable both backward and forward compatibility with software and freedom to use whatever distribution you’re more comfortable with. Mirror available at: https://gitlab.com/89luca89/distrobox

multipass - Multipass orchestrates virtual Ubuntu instances

wasm-micro-runtime - WebAssembly Micro Runtime (WAMR)

pkg2appimage - Tool and recipes to convert existing deb packages to AppImage