Deep Dive into firecracker-containerd

on YouTube ↗32m

" summary

Shows a working prototype that runs OCI images inside Firecracker microVMs by extending containerd: it adds four components — a block-device snapshotter, a control plugin, a proxy runtime shim and an in-VM agent — and uses runc inside the guest. Images are unpacked to host block devices (naive copy or device-mapper thin provisioning for dedupe), presented via vsock to guests; it works today but requires preallocated devices and has experimental vsock/attachment limitations.

AI-written summary · about

" chapters (10)

1. 0:00Introduction and basics
2. 1:21Container primitives
3. 4:14Containers vs. VMs
4. 7:10Security and isolation
5. 9:42Container runtime standards
6. 14:11Inside containerd
7. 16:59Firecracker overview
8. 19:40Firecracker integration
9. 28:12Implementation workflow
10. 29:49Project status and future

" related talks

• 27mServerless MicroVMs for Containerized ApplicationsNikita Sanjay Patwa, Neeraj Bhatt · DevConf.CZ 2025
• 20mFirecracker: Lightweight Virtualization for Serverless ApplicationsAndreea Florescu, Marc Brooker, Phil Piwonka, Alexandru Agache, Alexandra Iordache, Anthony Liguori, Rolf Neugebauer, Diana-Maria Popa · NSDI 2020
• 29mIntroduction and Deep Dive Into ContainerdKohei Tokunaga, Akihiro Suda · KubeCon + CloudNativeCon Europe 2021
• 30mIntroduction and Deep Dive into containerdWei Fu, Phil Estes, Derek McGowan, Michael Crosby · KubeCon + CloudNativeCon North America 2020 Virtual
• 44mThe Containerization of the Operating System: Exploring Bootc and the Future of Linux DeploymentHema Arun · Open Source Summit India 2026
• 24mLightweight VMs for serverless and containersSergio Lopez Pascual · DevConf.CZ 2020
• 23mCrack the FaaS Cold Start and Scalability BottleneckCathy Zhang, Rui Zang · KubeCon + CloudNativeCon Europe 2022
• 43mcontainerdWei Fu, Lantao Liu · KubeCon + CloudNativeCon China 2019