Search Results for "oci"

AgentENV is a distributed platform for running large numbers of isolated AI-agent environments across one or more machines. It uses Firecracker microVMs to provide strong sandboxing while loading diverse OCI-compatible images on demand. Overlay-based storage and bounded local caching keep frequently used data close without requiring every image to fit on each host. Snapshot-backed sandboxes can pause, resume, fork, and persist memory and filesystem changes for parallel or recoverable workflows. The platform includes an aenv command-line interface for creating templates, starting shells, executing commands, and managing sandbox lifecycles. ...

youki is an implementation of the OCI runtime-spec in Rust, similar to runc. Rust is one of the best languages to implement the oci-runtime spec. Many very nice container tools are currently written in Go. However, the container runtime requires the use of system calls, which requires a bit of special handling when implemented in Go. This is too tricky (e.g. namespaces(7), fork(2)); with Rust, it's not that tricky.

Microsandbox is an open source platform designed to securely execute untrusted code in isolated environments using lightweight virtualization techniques. It focuses on combining strong security guarantees with fast startup times by leveraging hardware-level microVM isolation instead of relying solely on traditional containers or full virtual machines. It aims to solve the common tradeoffs between speed, isolation, and control that developers encounter when running untrusted workloads. It...

Kata Containers is an open source container runtime, building lightweight virtual machines that seamlessly plug into the container ecosystem. Kata Containers is an open source community working to build a secure container runtime with lightweight virtual machines that feel and perform like containers, but provide stronger workload isolation using hardware virtualization technology as a second layer of defense. Since launching in December 2017, the community successfully merged the best parts...