Sysbox
Open-source, next-generation "runc" that empowers rootless containers
...Think of it as a "container supercharger": it enables your existing container managers/orchestrators (e.g., Docker, Kubernetes, etc.) to deploy containers that have hardened isolation and can run almost any workload that runs in VMs. Sysbox does this by making the container resemble a VM-like environment as much as possible, using advanced OS virtualization techniques. Unlike alternative runtimes such as Kata and KubeVirt, it does not use VMs. This makes it easier to use (particularly in cloud environments by avoiding nested virtualization), although it does not provide the level of isolation that VM-based runtimes do.