click
linuxkit
click | linuxkit | |
---|---|---|
4 | 14 | |
726 | 8,145 | |
- | 0.4% | |
4.2 | 9.1 | |
almost 2 years ago | 5 days ago | |
C++ | Go | |
GNU General Public License v3.0 or later | Apache License 2.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
click
-
Unikraft is a fast, secure and open-source Unikernel Development Kit
It's possible to create an IPSec + firewall based on the Click Modular Router[0] and run this on top of Unikraft[1].
[0]: https://github.com/kohler/click/wiki/IPsecEncap (and other IPSec* elements)
[1]: https://github.com/unikraft/app-click
It could make for an interesting tutorial with a full Click-based IPSec router though! :)
-
Ask HN: How are you using unikernels?
Many unikernel projects were ahead of their time. For example ClickOS [0] is ~7 years old but all its ideas still sound innovative. Someone could build an entire business on top of network function virtualization, using unikernels as an efficient sandboxing mechanism.
I’m not sure why unikernels have not caught on widely. I suspect their time has yet to come for some applications, but at least for NFV and sandboxing, I would bet on solutions using eBPF or XDP with WASM for sandboxing.
[0] https://github.com/kohler/click
-
Signed Char Lotte
Source: https://github.com/kohler/click/blob/6fa978f0188bd0b8a266f65...
Context: This is the source code of the Click Modular Router, a system for implementing packet processing logic with a graph-like DSL. Both primitives, and certain complex logic, are implemented in C++; however, as this has to be able to run as a Linux kernel module, it can't use the C++ standard library, and has its own stdlib.
- Want to borrow that e-book from the library? Sorry, Amazon won’t let you. - Its monopoly is stopping public libraries from lending e-books and audiobooks from Mindy Kaling, Dean Koontz, Dr. Ruth Westheimer, Trevor Noah, Andy Weir, Michael Pollan and a whole lot more
linuxkit
-
Gokrazy – Go Appliances
Another project that aims to deliver this is Linuxkit (https://github.com/linuxkit/linuxkit). All the components they ship are written in memory safe languages (usually Go) and run as containers under containerd. You can build a custom image very easily, fully defined as a YAML file.
- How to connect to a docker container service when it's running on a mac?
-
An overview of single-purpose Linux distributions
docker-the-company maintained https://github.com/linuxkit/linuxkit when I worked there. I have no idea who maintains it now, but it looks like it is still active (presumably still docker-the-company, since their adopters list [1] lists docker desktop).
[1]: https://github.com/linuxkit/linuxkit/blob/master/ADOPTERS.md
-
Create a minimalist OS using Docker Containers and Hashicorp Packer
LF-Edge EVE project leverages Linuxkit to create custom OSs for Edge Devices which in turn leverages Containers as Lego Blocks
-
RootFS Tooling
LinuxKit - Docker
-
Unpopular opinion: I was promised lightweight containers but I got yet another VM
Behind the scenes Docker Desktop for Mac spawns a linuxkit VM with a bit of extra stuff like NFS to enable mounting Mac paths into containers. In the Docker Desktop settings you'll find the current resource assignment for that VM. That is pretty much reserved for docker so that it does not have to compete with MacOS processes for available resources.
- Open source components of Docker for Mac
-
What happened to the nice Ansible cloud (provisioning) listing?
That said... you might want to check out linuxkit
-
Ask HN: How are you using unikernels?
The definition of what a unikernel is needs to be narrowed down, a lot of these projects in the space (not all the ones listed above) have material differences that are not clear:
- some run only one language
- some require recompilation
- some essentially swap out libraries, others do something closer to dropping your already mostly static binary in a minimal disk image
- some build pid1 processes, others VMs images
Anyway, here are some additional entries in the space:
- https://ssrg-vt.github.io/hermitux/
- https://github.com/linuxkit/linuxkit (more embedded/minimal VM than unikernel)
- https://nabla-containers.github.io/ (runs on Solo5)
I am going through using Linuxkit to build AMIs for cloud providers now. I wouldn’t necessarily class linuxkit as a universal project because it doesn’t have the hallmark blurring of user and kernel space or kernel-as-a-library but you can customize the kernel so it’s an adjacent idea, and I think it’s the one most likely to be in actual use at non-hyperscalers.
-
Unikraft: Fast, Specialized Unikernels the Easy Way
I believe there is growing interest in providing leaner, "trimmed" runtimes for services deployed to the cloud. Today, this is seen largely by specializing the Linux kernel for, for example, container services[0] or in general[1], as much as that is possible (the paper above covers this problem in greater detail). But, Unikernels in themselves are not yet widely adopted. This is the space Unikraft is aiming to enter, providing the ultimate level of specialization for a target application.
It's clear that bigger players, such as Red Hat[2] are interested in the topic of unikernels, and that cloud providers are preparing for this future too [3].
[0]: https://github.com/linuxkit/linuxkit
What are some alternatives?
unikraft - A next-generation cloud native kernel designed to unlock best-in-class performance, security primitives and efficiency savings.
nanos - A kernel designed to run one and only one application in a virtualized environment
docs - The front page and documentation for the Unikraft Open-Source Project.
lxd - Powerful system container and virtual machine manager [Moved to: https://github.com/canonical/lxd]
pykraft - Python library for configuring and building unikernels
mirage - MirageOS is a library operating system that constructs unikernels
app-click - Click Modular Router on Unikraft
kata-containers - Kata Containers is an open source project and community working to build a standard implementation of lightweight Virtual Machines (VMs) that feel and perform like containers, but provide the workload isolation and security advantages of VMs. https://katacontainers.io/
hermitux - A binary-compatible unikernel
firecracker-container