With crun:#986 merged, podman has learnt a new trick: lauching Confidential Computing TEEs! cc/ Daniel Walsh Giuseppe Scrivano

Blog: Kubernetes 1.25: alpha support for running Pods with user namespaces - kubernetes.io/blog/2022/10/0… #Kubernetes

collected in a blog post some fixes that I was working on in the past years to reduce the time to start up OCI containers: scrivano.org/posts/2022-10-…

crun 1.7 supports running the same #WebAssembly image used by Docker without any modification: $ readlink /usr/bin/crun-wasm ../bin/crun $ podman --runtime /usr/bin/crun-wasm run --platform=wasi/wasm32 -t --rm michaelirwin244/wasm-example [...] Server is now running

together with Alexander Larsson, we have finally sent upstream composefs. It is a new file system to mount read-only images with a bunch of cool features: lkml.org/lkml/2022/11/2… Let's see what the upstream Linux community thinks about it.

#RedHat Developers Announce Work On New "#Composefs" File-System -- Initially focused on container images and OSTree commits. phoronix.com/news/Composefs

[$] Composefs for integrity protection and data sharing lwn.net/Articles/91709… #LWN

Twitter’s mastodon ban is trickable with ZWS (zero width space) zerowidthspace.me http​s://hackyderm.io http​s://mastodon.social

[$] Hiding a process's executable from itself lwn.net/Articles/92038… #LWN

#Linux 6.3 Adds Support For Tmpfs IDMAPPED Mounts - Benefits systemd, Kubernetes & More phoronix.com/news/Linux-6.3…

User Namespaces with Kubernetes Stateful Pods kubernetes.io/blog/2023/09/1…

今日の発表資料です。#podmanjp Podman with WebAssembly speakerdeck.com/utam0k/podman-…

Finally, run binary-portable AI apps in Kubernetes across different OSes, CPUs, and GPUs. Instead of a different container image for each platform, you can now run a single wasm file on all devices — thanks to this PR merged upstream in crun yesterday. github.com/containers/cru…

kubernetes.io/blog/2024/04/2…

Exciting news from IBM Research to open source these models to drive increased community collaboration! @ibm research.ibm.com/blog/granite-c…

crun is probably rocket🚀 It's been a while since I took a benchmark among OCI runtimes. It'd be beneficial to use bpftool to find out the difference between crun and youki 🧐