3 ms·
caveat: this is based on rund. Extract from the readme: rund is an experimental containerd shim for running macOS containers on macOS. rund doesn’t offer the
by prmoustache 3y ago
caveat: this is based on rund. Extract from the readme:
rund is an experimental containerd shim for running macOS containers on macOS.
rund doesn’t offer the usual level of container isolation that is achievable on other OSes due to limited macOS kernel API.
What rund provides:
Filesystem isolation via chroot(2)
Cleanup of container processes using process group
OCI Runtime Specification compatibility (to the extent it is possible on macOS)
Host-network mode only
bind mounts
- blablabla123 3y agoI wonder if something comparable can be achieved with ptrace. I've tried to experiment with that but the API seems a bit unclear to say the least