Beyond Orchestration: The Cloud Native Runtimes Ecosystem for Performance and Security
summary
Unikraft builds application-tailored unikernel VM images with 3.1 ms boot demos and typical footprints of a few megabytes, claiming 3–5 ms boot times and dramatic memory reductions versus container+Linux. Images use compile-time specialization into a single sealed address space (no shells or daemons), run on Firecracker/KVM with virtio and 9p support, and integrate into Kubernetes via an OCI-wrapped runtime (runu shim) and a new CLI builder called craft kit.
AI-written summary · about
chapters (9)
- 0:00Start
- 0:432022 Cloud Native Themes
- 2:12Reducing the OS with specialization
- 4:21Could we reduce Linux further?
- 5:08The Unikernel Model
- 9:01Unikraft provides better performance
- 9:40Unikernels offer better performance.
- 11:05Unikernels offer better transport.
- 14:12Interfacing VMs with KBS
related talks
24mCut your Cloud Computing Costs by Half with Unikraft
10mLightning Talk: Millisecond Scale-to-Zero and the Quest to Never Pay for Idle Again
27mServerless MicroVMs for Containerized Applications
43mClimbing out from the digital mud with unikernels
34mContainer Runtimes... on Lockdown: The Hidden Costs of Multi-tenant Workloads
09mLessons Learned from Building Fast Infra for Agents to Access the Internet
25mFrom Cloud To AI: How Kata Containers 4.0 Reinvents the Sandbox for the Agent Era
40mURUNC: A Unikernel Container Runtime