You can now run same OCI images as containers or Firecracker microVMs
pullrun
52 points
24 comments
July 23, 2026
Related Discussions
Found 5 related stories in 768.0ms across 14,736 title embeddings via pgvector HNSW
- How we run Firecracker VMs inside EC2 and start browsers in <1s gregpr07 · 13 pts · June 16, 2026 · 54% similar
- Docker Offload redbell · 22 pts · April 05, 2026 · 48% similar
- We Reverse-Engineered Docker Sandbox's Undocumented MicroVM API yakkomajuri · 76 pts · May 21, 2026 · 47% similar
- MicroVM sandbox on Win, Mac, Linux, with policy engine pploug · 12 pts · July 14, 2026 · 47% similar
- The 1979 Design Choice Breaking AI Workloads za_mike157 · 24 pts · March 09, 2026 · 46% similar
Discussion Highlights (5 comments)
ranger_danger
Where does the microvm kernel/initrd come from? How can it be built? I just want a system that's as easy as "docker run ubuntu" but launches as a microvm instead, without me having to source a kernel or remember hugenormously long qemu incantation lines.
vaylian
Sweet. I had hoped for someone to make a p2p container registry eventually. There is too much centralization with the current popular registries.
aliasxneo
Is the OP the author of this? Because they are writing responses here that are unquestionably unedited LLM generated responses. The project looks cool, and I'm particularly glad to see a reach for a p2p container registry, but that sort of behavior doesn't lend credibility to something as critical as image infrastructure.
miladyincontrol
"memmap2" link in readme is broken btw, I think your llm means memmap-rs
Izmaki
> Why this matters: Modern infrastructure uses too many execution engines — Docker for dev, containerd for production, Firecracker for isolation, CRI for Kubernetes, MCP agents for AI. It is my understanding that Docker Engine adds capabilities (such as network stack) on top of Containerd (which is a project maintained by the same people), and "CRI for Kubernetes" is a Container Runtime Interface which COULD be something other than Containerd but often is just Containerd. So in essence the reason why yet another runtime exists is that we have a runtime for containers (Docker/Containerd, Containerd and, for example, Containerd as the CRI in K8s), a runtime for isolation and a runtime for AI agents. That seems like an unnecessary argument on its own, which makes me wonder why it's listed as the first argument.