rkt/rkt

stage1: idea of using pure golang unprivileged containers (unc) as execution engine

Open

#1.318 aberto em 21 de ago. de 2015

Ver no GitHub
 (0 comments) (0 reactions) (0 assignees)Go (865 forks)batch import
component/stage1help wantedkind/enhancementpriority/Pmaybe

Métricas do repositório

Stars
 (8.871 stars)
Métricas de merge de PR
 (Nenhuma PRs mesclada em 30d)

Description

just an idea (similar to #1030), we can base on unc, with great technical explanation in this blog series

pros:

  • unprivileged (non root required)
  • pure golang (no c/systemd nspawn depedency)
  • easier to maintain
  • existing implementation (support all namespaces, even network support)

cons:

  • requires go 1.5
  • re-implementation systemd machined integration
  • cgroups missing
  • capabilities managment missing
  • overlay/union fs missing

Guia do colaborador