libkrun
kwarantine
| libkrun | kwarantine | |
|---|---|---|
| 8 | 1 | |
| 931 | 14 | |
| 6.4% | - | |
| 9.0 | 0.0 | |
| 5 days ago | about 1 year ago | |
| Rust | ||
| Apache License 2.0 | GNU General Public License v3.0 only |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
libkrun
-
Hyperlight: Virtual machine-based security for functions at scale
libkrun (on Linux) is probably a closer comparison (though still not quite the same). https://github.com/containers/libkrun
- My VM is lighter (and safer) than your container
-
Krunvm – Create MicroVMs from OCI Images
These specific microVMs are managed by: https://github.com/containers/libkrun#goals-and-non-goals (linked directly to project scopes).
In summary though (others redacted):
# Goals - Execute Docker Containers as QEMU MicroVMs
-
Show HN: krunvm – Create and run lightweight VMs from OCI images
The key is that libkrun (https://github.com/containers/libkrun), the library that krunvm uses for running the VMs, as recently integrated support for Hypervisor.framework on ARM64, in addition to KVM.
As for buildah, the Homebrew repo contains a build that includes this PR (https://github.com/containers/storage/pull/811).
kwarantine
-
Execute Docker Containers as QEMU MicroVMs
No, gVisor is from Google. They emulate system calls in user-space and use VMs, which increases runtime performance overhead. We use hardware virtualization to directly run containers -- no I/O emulation, no expensive VM exits, scale as needed. Initial comparison with FC/GVisor/Xen here: https://github.com/ashishbijlani/kwarantine
What are some alternatives?
firecracker - Secure and fast microVMs for serverless computing.
krunvm - Create microVMs from OCI images
libkrunfw - A dynamic library bundling the guest payload consumed by libkrun
slim - Build and run tiny vms from Dockerfiles. Small and sleek.
harvester - Open source hyperconverged infrastructure (HCI) software
kubevirt - Kubernetes Virtualization API and runtime in order to define and manage virtual machines.
crun - A fast and lightweight fully featured OCI runtime and C library for running containers
container-shell - Starts and attaches a sandboxed shell using docker with access to the current or project directory
kata-containers - Kata Containers is an open source project and community working to build a standard implementation of lightweight Virtual Machines (VMs) that feel and perform like containers, but provide the workload isolation and security advantages of VMs. https://katacontainers.io/