Show HN: Vas-quod – A minimal Linux container runtime written in Rust (github.com)

Hey cool, I was just about to spend a bunch of time writing pretty much the same thing.

What's up with the name? It is cool. But it is weird. In fact it is cool-weird.

Less then 200 lines of code? That is very minimal :)

<naming rant> What is wrong with the simpler 'vasquod'??</naming rant> :-)

Nice work on this! If you cut out a bunch of the features supported by other containerization systems, the code gets quite short. My first one was in C and only a couple hundred lines. I worked on a full-featured rust container runtime while I was at Oracle. It is compatible with the oci-runtime spec, so can be used as a runtime for docker or kubernetes. The most up to date fork is at https://github.com/drahnr/railcar if you want to take a look at it for any ideas.

Any security concerns?

Always wish we could run a container system like this without sudo/root access.

Pretty neat, minimal and functional

given there's an unshare in linux-util, i think it would be possible to even do this with a shell script. :)