Urunc: The New Kid In The Block Of Sandboxed Container...
summary
urunc flips the model by running the application over the sandbox instead of inside it, claiming CRI compatibility and seamless container workflow integration while requiring no in-sandbox agent. It supports unikernels plus Linux and BSD guests and plugs into monitors like QEMU and gVisor. Benchmarks show cold-start overhead around 20–28% versus roughly 2x for other sandboxed runtimes, and density tests on an 8 GB Raspberry Pi reached 467 pods (vs ~170 with gVisor and ~32 with Kata). Extensible monitor/guest API is available.
AI-written summary · about
related talks
40mURUNC: A Unikernel Container Runtime- 40mURUNC: A Unikernel Container Runtime
19mRunD: A Lightweight Secure Container Runtime for High-density Deployment...
17mUnikernel based deployments
34mLook ma, no OS! Unikernels and their applications
38mUnikernels: The Next Evolution in Cloud Infrastructure
44mUnikernels and Hyper Elastic Clouds
24mUsing Unikernels to deploy real-world apps