[an-oh-cheer] Another OCI Runtime.

An experimental Linux container runtime, implementing the OCI Runtime Spec.

The process of building this is being documented in a series of blog posts which you can read here: Building a container runtime from scratch in Go.

• Pass all tests in the opencontainers OCI Runtime Spec test suite.
• Pass all tests in the Kubernetes CRI validation test suite.
• Implement optional Seccomp.
• Implement optional AppArmor.

1. Download the tarball for your architecture from Releases.
2. Extract the anocir binary from the tarball into somewhere in $PATH, e.g. ~/.local/bin.
3. View docs by running anocir --help or anocir COMMAND --help.

By default, the Docker daemon uses the runc container runtime. anocir can be used as a drop-in replacement for runc.

You can find detailed instructions on how to configure alternative runtimes in the Docker docs. If you just want to quickly experiment, the following should suffice:

# 1. Stop any running Docker service
sudo systemctl stop docker.service

# 2. Start the Docker Daemon with added anocir runtime
sudo dockerd --add-runtime anocir=PATH_TO_ANOCIR_BINARY

# 3. Run a container using the anocir runtime
docker run -it --runtime anocir busybox sh

The anocir CLI implements the OCI Runtime Command Line Interface spec. You can view the docs by running anocir --help or anocir [COMMAND] --help.

Feel free to leave any comments/suggestions/feedback in issues.

Prerequisite: Compiler for Go installed (instructions).

1. git clone [email protected]:nixpig/anocir.git
2. cd anocir
3. make build
4. mv tmp/bin/anocir ~/.local/bin

I'm developing anocir on the following environment. Even with the same set up, YMMV.

• Linux vagrant 6.8.0-31-generic #31-Ubuntu SMP PREEMPT_DYNAMIC Sat Apr 20 00:40:06 UTC 2024 x86_64 x86_64 x86_64 GNU/Linux
• go version go1.24.5 linux/amd64
• Docker version 27.3.1, build ce12230

You can spin up this VM from the included Vagrantfile, just run vagrant up.

See OCI.md for details of tests.

1. vagrant up --provision
2. vagrant ssh
3. cd /anocir
4. make build
5. cd /anocir/test/runtime-tools
6. make runtimetest validation-executables
7. sudo RUNTIME=../../tmp/bin/anocir ../scripts/oci-integration.sh

While this project was built entirely from scratch, inspiration was taken from existing runtimes, in no particular order:

• youki (Rust)
• pura (Rust)
• runc (Go)
• crun (C)

MIT