rusty container

youki is an implementation of runtime-spec in Rust, referring to runc.

Here is why we are writing a new container runtime in Rust.

• Rust is one of the best languages to implement oci-runtime. Many container tools are written in Go. It's all very nice products. However, the container runtime requires the use of system calls, which requires a bit of special handling when implemented in Go. This is too tricky(e.g. namespaces(7), fork(2)); with Rust, it's not that tricky and you can use system calls. Also, unlike C, Rust provides the benefit of memory management.
• The development of railcar has been suspended. This project was very nice but is no longer being developed. This project is inspired by it.
• We have fun implementing this. In fact, this may be the most important.

youki is not at the practical stage yet. However, it is getting closer to practical use, running with docker and passing all the default tests provided by opencontainers/runtime-rools.

Local build is only supported on linux. For other platforms, please use the devcontainer that we prepared.

• Rust(See here)
• Docker

$ git clone [email protected]:utam0k/youki.git
$ cd youki
$ cargo build

Starting the docker daemon.

$ dockerd --experimental --add-runtime="youki=$(pwd)/target/x86_64-unknown-linux-gnu/debug/youki"

You can use youki in a different terminal to start the container.

$ docker run -it --rm --runtime youki busybox

You can use opencontainers/runtime-rools to do integration testing used in CI. See it's documentation for details.

TBD

• run with docker
• pivot root
• mount devices
• namespace
• capabilities
• rlimits
• cgroups v1
  • devices
  • cpu
  • cpuacct
  • cpuset
  • memory
  • freezer
  • net_cls
  • blkio
  • perf_event
  • net_prio
  • hugetlb
  • pids
  • rdma
• hooks

This project welcomes your PR and issues. For example, refactoring, adding features, correcting English, etc. If you need any help, you can contact me on Twitter.