Project Lightning Talk: Urunc: The New Kid In The Block Of Sandboxed Container... Charalampos Mainas

This talk introduces urunc, a sandboxed container runtime that innovatively runs applications directly over the sandbox instead of inside a traditional container. The speaker, Charalampos Mainas, explains urunc's unique execution model and contrasts it with other sandboxed runtimes, discussing practical use cases and the currently supported sandbox monitors and guest kernels. Originally designed for unikernels, urunc now accommodates Linux and BSD guests, allowing for the use of conventional container images alongside applications tailored for specialized environments. The session also covers urunc's extensibility, showcasing how new monitors and guest types can be easily integrated, as well as highlighting the latest feature improvements and the project's roadmap for the upcoming year.