garden-shed
firebuild
| garden-shed | firebuild | |
|---|---|---|
| 1 | 5 | |
| 2 | 92 | |
| - | - | |
| 0.0 | 0.0 | |
| over 4 years ago | over 2 years ago | |
| Go | Go | |
| Apache License 2.0 | GNU Affero General Public License v3.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
garden-shed
-
Docker Without Docker
Super great write up. This really took me back to my days of working on the container platform behind CloudFoundry.
In particular, we also used to use loop devices [1] but with AUFS mounted on them.
Later we moved over to BTRFS and then Overlay on XFS [2] to help with our unprivileged (security) story.
Also, this was a great piece of technical writing. Thanks for sharing!
1: https://github.com/cloudfoundry-attic/garden-shed/blob/6c5b0...
2: https://github.com/cloudfoundry/grootfs
firebuild
-
We clone a running VM in 2 seconds
Regarding turning Dockerfiles into a MicroVM: https://gruchalski.com/posts/2021-03-23-introducing-firebuil..., on GitHub: https://github.com/combust-labs/firebuild. This could get you started.
Disclaimer: I’m the author.
-
Podman 4.0.0
> See, and in almost all of my use-cases, I really do. I do HPC computing, which is almost always a multi-tenant environment.
Maybe you need firecracker with something along the lines of https://github.com/combust-labs/firebuild?
-
Hypervisor for multi-tenant computing, like it should be
I was the one who posted that question and I deleted it because I understood I was asking to compare apple to oranges. Firecracker uses KVM under the hood. With regards to the overhead, sure, there's going to be resources needed but firecracker is pretty good at running VMs will low level overhead. We're talking thousands on a single host.
I've done some fair share of evaluating firecracker for https://github.com/combust-labs/firebuild and the need to provision is red herring. firebuild can run a VM directly from a Dockerfile and Docker image. Fly.io team does something similar. It's basically a fully functional app out of the container within a matter of milliseconds.
What would be nice is to see a direct comparison between your solution and firecracker.
-
Docker Without Docker
I am working on something like this: https://github.com/combust-labs/firebuild.
From a Dockerfile, it's not as simple without creating an image first.
What are some alternatives?
firecracker-containerd - firecracker-containerd enables containerd to manage containers as Firecracker microVMs
cloud-hypervisor - A Virtual Machine Monitor for modern Cloud workloads. Features include CPU, memory and device hotplug, support for running Windows and Linux guests, device offload with vhost-user and a minimal compact footprint. Written in Rust with a strong focus on security.
simplenetes - The sns tool is used to manage the full life cycle of your Simplenetes clusters. It integrates with the Simplenetes Podcompiler project podc to compile pods.
linuxkit - A toolkit for building secure, portable and lean operating systems for containers
Nomad - Nomad is an easy-to-use, flexible, and performant workload orchestrator that can deploy a mix of microservice, batch, containerized, and non-containerized applications. Nomad is easy to operate and scale and has native Consul and Vault integrations.
kata-containers - Kata Containers is an open source project and community working to build a standard implementation of lightweight Virtual Machines (VMs) that feel and perform like containers, but provide the workload isolation and security advantages of VMs. https://katacontainers.io/
mariadb-podman-socket-activation - Demo of a templated systemd user service that runs rootless Podman and starts MariaDB with socket activation
firecracker-container
kubevirt - Kubernetes Virtualization API and runtime in order to define and manage virtual machines.
kind - Kubernetes IN Docker - local clusters for testing Kubernetes