utam0k

I am the author of this. Safety is one. Recently, another strength is Wasm support ;) youki has been an important key person for Wasm support in K8s.

Your comments are very encouraging to me. Thank you very much.

Thanks a lot. As I'm not a native English speaker, I'm not confident in my writing.

Hi! Thanks for your comment. Some people are now interested in it and are considering using it as a library. For example, I don't know the details, but they are considering using some of youki's libraries in kata-container. The most difficult part is that even if it meets the OCI Runtime specification, it doesn't work in the real world. In fact, the runc code is the specification.

Kernel calls and cgroupfs are the main functions we use. cgroupfs is a file system, so it only reads and writes to files. I think it can do simple things. Of course, I started out with something very simple. It's fun to do just a little bit.

Thanks for your interest! The container runtime is software that uses the linux kernel feature cgroup/pivot_root/namespace to provide a space for processes to run in isolation from the host. There is a specification called OCI Runtime that describes it in more detail.

Thanks for your comment. Although I agree with you, I don't have a permission to rename it &-(

Hi! I am the author of youki. Please let me know if you have any questions.