bk99.de entertain the web since 1997

bk99.de
HN · ContainersCurated

Apple Container: Linux containers on macOS

Summary

Apple develops a Swift-based runtime that starts Linux containers in lightweight virtual machines on Apple Silicon. Apple publishes the project under the Apache 2.0 licence. The tool targets Apple Silicon Macs and uses Linux guest kernels.

Ideas

  • Every container gets its own lightweight virtual machine.
  • A native CLI manages images, networks, volumes and processes.
  • OCI images thus get a direct execution path on macOS.
  • Virtualisation keeps the Linux kernel separate from the Darwin host.
  • Swift and Apple's Virtualization framework integrate containers tightly into macOS.

Insights

  • Container portability ends where the host kernel and target kernel differ.
  • Lightweight VMs can combine stronger isolation with familiar container handling.
  • Native platform integration competes with established ecosystem compatibility.

Facts

  • Container images follow the OCI format.

Recommendations

  • Check Compose, registry and network compatibility before migrating tools.
  • Still treat every container VM as a Linux system that needs patching.

References

Read the original article

Search the Web Archive

HN · 2023

Go, containers and the Linux scheduler

River Phillips shows how unrecognised container CPU limits worsen Go garbage collection and application latency. The test container was given a quota of four CPUs. Adjusting GOMAXPROCS shortened the GC cycle from about 2.5 to under one millisecond.

HN · 2017

Linux containers in 500 lines of code

Liz Rice builds a small container in Go and makes namespaces, cgroups, the root file system and process start directly visible in the code. The example comprises about 500 lines of Go. It uses Linux-specific system calls.

HN · 2017

LinuxKit builds small Linux systems for containers

Docker presents LinuxKit as a toolkit for minimal, immutable and reproducible Linux images on different platforms. LinuxKit was presented at DockerCon in 2017. The project is licensed under an Apache licence.