Hacker GitHub

← All repos

firecracker-microvm/firecracker-containerd

View on GitHub ↗ ★ 2,976 Go

firecracker-containerd enables containerd to manage containers as Firecracker microVMs

23 mentions on Hacker News by 22 people: 3 stories, 20 comments · first 2018-11-27 · latest 2026-03-18

Mentions per year 23 mentions · busiest year 2019 (5)
20082026
AllStoriesComments NewestTopOldest
  1. "much better isolation than containers" If you've got an exploit for docker / linux containers, please share it with the class. What I'm saying is that in practice, containers and VMs have both been quite secure. Also, you can configure…
    comment by TheDong · 2026-02-02 · in Show HN: NanoClaw – “Clawdbot” in 500 lines of TS with Apple container isolation
  2. Firecrackers been open source since 2018, I believe. Firecracker-containerd ( https://github.com/firecracker-microvm/firecracker-container... ) has been around quite a while too, which aims to run containers in microvms.
    comment by scoodah · 2025-08-30 · in Firecracker: Secure and fast microVMs for serverless computing
  3. Hmm. On one hand, I don't deploy or use Docker itself. To me, "Docker" is more of a concept than a tool. Due to the way networking works in actual Docker, I don't like using it in either dev machines or production, even for smaller cases.…
    comment by jchw · 2025-08-19 · in XZ Utils Backdoor Still Lurking in Docker Images
  4. Why not some of the existing microvm efforts? Cloud Hypervisor and Firecracker both have an excellent reputation for ultra lightweight VM's. Both are usable in the very popular Kata Containers project (as well as other upstart VM's…
    comment by jauntywundrkind · 2025-05-30 · in Microsandbox: Virtual Machines that feel and perform like containers
  5. Here are some projects that run docker containers on top of micro/lightweight VMs: - https://github.com/firecracker-microvm/firecracker-container... - https://github.com/kuasar-io/kuasar - https://github.com/kata-containers/kata-containers…
    comment by flanked-evergl · 2024-05-14 · in My VM is lighter (and safer) than your container (2017)
  6. fly.io uses Firecracker. Firecracker is Open Sourced with an Apache 2 license. It's faster than LightVM mentioned in the post. Firecracker also has containerd support ( https://github.com/firecracker-microvm/firecracker-container... ).…
    comment by iamstan23 · 2024-05-14 · in My VM is lighter (and safer) than your container (2017)
  7. Thanks. So there are two concepts where isolation is mentioned, the --pure and the --container options. But still the documentation is very light on details and doesn't really answer what kind of (if any) security boundary or sandbox is…
    comment by fulafel · 2024-03-14 · in Identifying Software
  8. There is this project, which I have never used, but seems promising. https://github.com/firecracker-microvm/firecracker-container...
    comment by gorbypark · 2023-02-28 · in Firecracker internals: Inside the technology powering AWS Lambda (2021)
  9. How does that compare to firecracker-containerd? https://github.com/firecracker-microvm/firecracker-container... This repository enables the use of a container runtime, containerd, to manage Firecracker microVMs. Like traditional…
    comment by adolph · 2021-10-18 · in Firecracker MicroVMs
  10. > Containers are not a security measure. They're acceptable for some resource constraint considerations, but you should not ever use them because of security concerns. If that's something to worry about, use VMs at the very least. This is…
    comment by hardwaresofton · 2021-04-22 · in Tiny Container Challenge: Building a 6kB Containerized HTTP Server
  11. I'm really impressed by fly.io, and the candidness with which they share some of their really awesome technology. Being container-first is the next step for PaaS IMO and they are ahead of the pack. I aim to build a platform like theirs…
    comment by hardwaresofton · 2021-04-09 · in Docker without Docker
  12. yes, that's correct. With both the drivers (podman, containerd) you can run OCI containers without the need to run docker daemon. IMO, or atleast when we were making that decision, a key factor that we considered: Since docker has been…
    comment by shishirm · 2021-02-17 · in Running Nomad for a Home Server
  13. Funny you say that because I was talking to an openfaas customer who was using V8 isolates and is moving away from that because have their own issues with mutability. They are likely going to use kata containers - which can be configured…
    comment by alexellisuk · 2021-02-06 · in I discovered FaaS and what it changed for me
  14. Bottlerocket runs containers using containerd, so containers are visible as processes on the host, from its perspective, not currently isolated from each other via a hypervisor. Bottlerocket limits containers ability to interact with the…
    comment by NathanKP · 2020-09-01 · in Bottlerocket, an open source Linux distribution built to run containers
  15. See https://github.com/firecracker-microvm/firecracker-container...
    comment by cpuguy83 · 2020-03-07 · in Firecracker: Secure and fast microVMs for serverless computing
  16. Competition from Linux has become very stiff. For me, Kubuntu 19.10 delivers on all of the promises that OpenSolaris made back in the day. My laptop has two 1TB SSDs in a ZFS mirror. Docker works as you'd hope, creating a new ZFS dataset…
    comment by npx · 2019-11-05 · in Illumos is a Unix operating system which provides next-generation features
  17. There's this[1], though not exactly what you asked for. [1] - https://github.com/firecracker-microvm/firecracker-container...
    comment by pcnix · 2019-06-14 · in Show HN: Slim – Build and run tiny VMs from Dockerfiles
  18. (I work at AWS) Have you seen https://github.com/firecracker-microvm/firecracker-container... ? The team here is working to make firecracker as seamless as possible for running containerized applications in a microvm.
    comment by dastbe · 2019-05-15 · in GKE Sandbox: Independent operating system kernel to each container
  19. In addition to the firecracker-containerd[0] architecture, there's also firecracker support in kata containers[1]. While firecracker aims to be as lean as possible[2], kata aims to be portable[3]. It would be swell if the bits that run…
    comment by mgerdts · 2019-01-04 · in The Firecracker virtual machine monitor
  20. You can also see an early proof of concept integration with containerd at https://github.com/firecracker-microvm/firecracker-container...
    comment by arun_gupta · 2018-11-27 · in AWS Firecracker - Secure and fast microVMs for serverless computing