Open Container Initiative-based implementation of Kubernetes Container Runtime Interface

A fast and lightweight fully featured OCI runtime and C library for running containers

A novel container runtime, aka confidential container, for cloud-native confidential computing and enclave runtime ecosystem.

Rootless container runtime with no daemon. Runs agent tool calls and LLM-generated code in kernel-enforced containers.

Simplistic container manager

VMM-based macOS Native Container Runtime

rootless runc-based container engine - deprecated in favour of podman

CLI tool for spawning and running containers on Windows according to the OCI specification

An OCI runtime for Proxmox VE: Proxmox LXC containers from the command line, and crun under podman, containerd, CRI-O and Kubernetes, with an isolation profile per RuntimeClass.

oci-image and oci-runtime spec in rust. Un-official mirror of libocispec.

Inject files and devices into OCI containers

🍪 An OCI spec-compliant Linux container runtime, written in Go.

Ridiculously lightweight containers for macOS. No Docker. No daemon. No Docker Desktop. Just one binary.

minimal OCI-ish container runtime in Go — namespaces, pivot_root, supervising init, from scratch

Container engine with OCI specification

C based container runtime interface.

A hands-on demo to run WebAssembly (WASM) workloads in Kubernetes using containerd, crun, and WasmEdge

Secure-execution domain repository providing modular runtime-security components for sandboxing, capability enforcement, cryptographic isolation, audit logging, and policy-driven execution control — designed for building hardened application and infrastructure runtimes.

OCI-compliant container runtime built in Rust.