urunc: A container runtime for unikernels and single application kernels
summary
urunc is a CRI-compatible container runtime that runs tiny VMs or unikernels as containers and integrates with Kubernetes, managing each workload as one VM per container with a monitor process that directly controls the app kernel and lifecycle. It supports both software and hardware sandboxes and treats sidecars as regular containers. Benchmarks show typical sandbox runtimes nearly double latency while urunc adds only 20–30% overhead for single-application Linux kernels and under 20% with unikernels, code is open source and on GitHub.
AI-written summary · about
related talks
40mURUNC: A Unikernel Container Runtime
30mBeyond Orchestration: The Cloud Native Runtimes Ecosystem for Performance and Security
34mContainer Runtimes... on Lockdown: The Hidden Costs of Multi-tenant Workloads
43mClimbing out from the digital mud with unikernels
25mUnikernels and why they're useful (or not)
26mConfidential Containers with the Crun-Krun Container Runtime
34mWhat Container Runtime Engine Do I Need?
36mKata Containers: Hypervisor-Based Container Runtime