Vagga - containerization without daemons
summary
Vagga claims full-scale development containerization without a central daemon and actually implements that: it uses user namespaces and two small supervisor processes instead of Docker’s long-running daemon, can rebuild only changed dependency containers, and produces tiny deploy images by copying build artifacts. Rust libraries like an unshare/clone crate and mount helpers get written and used. Deployment tools include a 5K-line C supervisor (leas) and a decentralized monitor (control) that ran in production for ~a year, showing debug builds hitting 100% CPU versus 1% in release.
AI-written summary · about
chapters (5)
- 0:00Start
- 0:35What is vagga? . Challenges • Rust + Containers • Deployment Tools
- 4:51The Higher Level Package Manager
- 7:48A Containerization Tool Without Daemons
- 18:59Can't install as unprivileged (mknod, audit) • Large images (containing kernel) • Occassionally break • Unreliable mirrors
related talks
20mrust-vmm: A Security Journey
12mRust-vmm Status Report
17mRust in Production
05mKeynote: Modernizing Virtualization Technology for Cloud Native Computing
31mBuild and manage Wasm applications using container tools
24mCloud-hypervisor: A new choice for virtual machine monitor
21mRust - Cargo Cult?
59mRust Microservice in Containers