runtime

nd even better than that -- it's actually good. Kubernetes also has multiple competing container runtimes all rushing to fit the CRI (Container Runtime Interface). Just some of the stuff out there: * cri-containerd - https://github.com/containerd/cri-containerd * runv (hypervisor based) - https://github.com/hyperhq/runv * clear containers (hypervisor based) - https://github.com/clearcontainers/runtime * kata containers (hypervisor based, collaboration of runv + clear container) - https://katacontainers.io/ * frakti (combination of runv & docker, enabling switching @ runtime) - https://github.com/kubernetes/frakti A bunch of the projects are in their infancy, but the CNCF/kubernetes and the community are doing the right thing investing in lots of them, and letting the good ones bubble to the top. I don't run a production kubernetes cluster but I've found cri-containerd to be really easy to use and haven't had any major problems with it, mostly small configuration things. The last one, frakti, gets me really excited, because it lets you be flexible about which containers run in more protected environments and which don't. Also really exciting is frakti v2 (https://github.com/kubernetes/frakti/tree/containerd-kata), which is kata + containerd.