rkt/rkt
Ver no GitHubstage1: idea of using pure golang unprivileged containers (unc) as execution engine
Open
#1.318 aberto em 21 de ago. de 2015
component/stage1help wantedkind/enhancementpriority/Pmaybe
Métricas do repositório
- Stars
- (8.871 stars)
- Métricas de merge de PR
- (Nenhuma PRs mesclada em 30d)
Description
just an idea (similar to #1030), we can base on unc, with great technical explanation in this blog series
pros:
- unprivileged (non root required)
- pure golang (no c/systemd nspawn depedency)
- easier to maintain
- existing implementation (support all namespaces, even network support)
cons:
- requires go 1.5
- re-implementation systemd machined integration
- cgroups missing
- capabilities managment missing
- overlay/union fs missing