#containers

A Virtual Machine Monitor for modern Cloud workloads. Features include CPU, memory and device hotplug, support for running Windows and Linux guests, device offload with vhost-user and a minimal compact footprint. Written in Rust with a strong focus on security.

Firecracker is an open source virtualization technology purpose-built for creating and managing secure, multi-tenant container and function-based services. It enables you to deploy workloads in lightweight virtual machines (microVMs) that provide enhanced security and workload isolation over traditional VMs, while enabling the speed and resource efficiency of containers.

For teams that want the capabilities of Firecracker without managing infrastructure, Lambda MicroVMs is a fully managed serverless compute primitive. Built on the same Firecracker virtualization powering 15 trillion+ monthly Lambda function invocations, it provides isolated sandboxes with near-instant launch, state persistence for up to 8 hours, and automatic suspend/resume. No capacity planning required.

Every tenant gets their own isolated cluster. Nothing else.

With a few simple commands, you can create your first cluster and define how workloads are isolated — all with a lightweight vcluster.yaml config.

Project Goal

To provide container runtimes on macOS with minimal setup.

zot: a production-ready vendor-neutral OCI image registry - images stored in OCI image format, distribution specification on-the-wire, that's it!

Whalebrew creates aliases for Docker images so you can run them as if they were native commands. It's like Homebrew, but with Docker images.