krunvm

Krunvm has some breaking issues that I'm trying to upstream fixes to: https://github.com/containers/krunvm/pull/74. Amazing project and maintainer btw. This product is effectively wrapper that has some fixes + devX glue that makes the experience hopefully faster. I try to improve the cleanup, logging, resources monitoring as an example: https://github.com/BinSquare/ERA/blob/main/era-agent/vm_serv... The recipes and skills stuff is pretty experimental, we're trying to see if we can make this a full environment where agents can just have all the tools they need to build along with full privilege (sudo) because it's inside a microvm!

Why not some of the existing microvm efforts? Cloud Hypervisor and Firecracker both have an excellent reputation for ultra lightweight VM's. Both are usable in the very popular Kata Containers project (as well as other upstart VM's Dragonball, & StratoVirt). In us by for example the CNCF Confidential Containers https://github.com/kata-containers/kata-containers/blob/main... https://confidentialcontainers.org/ There's also smaller efforts such as firecracker-containerd or Virtink, both which bring OCI powered microvms into a Docker like position (easy to slot into Kubernetes), via Firecracker and Cloud Hypervisor respectively. https://github.com/smartxworks/virtink https://github.com/firecracker-microvm/firecracker-container... Poking around under the hood, microsandbox appears to use krun. There is krunvm for OCI support (includes MacOS/

Lots of cool hybrid container/VM ideas are being developed! Bootable Container Images are a standard for launching VMs from OCI images: https://containers.github.io/bootable/ crun-vm (https://github.com/containers/crun-vm) is similar to RunCVM in that it can launch container images (or VM disk images) in VMs. It's an OCI runtime so it fits into the podman, Docker, or Kubernetes model. krunvm (https://github.com/containers/krunvm) is a standalone tool with a similar workflow where you can launch a VM from an OCI image. It predates Bootable Container Images, so I think it injects its own kernel.

This project creates self-hosted (ephemeral) GitHub runners based on krunvm [1]. krunvm creates microVMs, so the project enables fully isolated runners inside your infrastruture. MicroVMs boot fast, providing an experience close to running containers. The project starts VMs based on the multi-platform OCI images that it creates -- ubuntu [2](default) or fedora [3]. The default is to create far-less capable runners than the GitHub runners, but most settings are similar to when running at GitHub: same user ID, member of the `docker` group, password-less `sudo`, etc. Since krunvm runs on MacOS, this should also run on MacOS -- although I haven't been able to test it: reports and/or PRs are welcome. [1]: https://github.com/containers/krunvm [2]: https://github.com/efrecon/gh-runner-krunvm/pkgs/container/r... [3]: https://github.com/efrecon/gh

Maybe https://github.com/containers/krunvm

For an even more lightweight approach to running containers in VMs see: https://github.com/containers/krunvm It's powered by https://github.com/containers/libkrun.

A couple more: https://github.com/containers/krunvm https://github.com/weaveworks/ignite