libkrun: KVM-based isolation for your workloads
summary
libkrun is a dynamic library that embeds a Rust‑VMM/Firecracker VMM and a bundled minimalist kernel so runtimes and Podman/crun can spawn tiny VM per container (one vCPU, 512MB demo) without external VMM binaries. It uses virtio‑fs rootfs instead of block devices, supports virtio console, vsock and virtio balloon free‑page reporting, and implements transparent socket impersonation so networked apps inside the guest reach host/external services; demos run BusyBox and full Debian rootfs and successfully access host HTTP and external endpoints.
AI-written summary · about
chapters (10)
- 0:00Introduction to Libkaran
- 1:03Goals and architectural design
- 5:42Storage without block devices
- 6:21Practical demonstration
- 10:35Pros and cons
- 17:41Networking demonstration
- 20:17Performance and integration
- 24:56Minimalist example code
- 28:32Future directions
- 30:02Question and answer session
related talks
38mPanel Discussion: KVM-based Virtualization Contributor Q&A
17mVirtualisation in Docker, using KVM as Hypervisor
43mClimbing out from the digital mud with unikernels
26mMulti-KVM Abstract
37mVirter – How the "Docker for VMs" Can Help You Test the Linux Kernel
23mrkt Intro
50mMultikernel Architecture: Kernel-to-Kernel Isolation and Resource Management
54mkvmtool - A QEMU Alternative?