Container Runtimes

AI Agents? Not on my host

Over the past few years, Large Language Models (LLMs) have changed how we interact with computers. Instead of navigating interfaces or reading documentation, we simply describe what we want in natural language.

Feb 11, 2026

Sandboxing WASM with Unikernels for Secure Cloud-Native Deployments

WebAssembly (WASM) is rapidly emerging as a transformative technology in the cloud-native ecosystem. Its binary instruction format, designed for execution on a stack-based Virtual Machine (VM), enables WASM modules to run seamlessly on any platform, unlocking unprecedented portability. Moreover, WASM promises near-native execution performance and enhanced security due to its “sandboxed” execution model.

Nov 21, 2024

urunc: Introducing a unikernel container runtime

This post is about urunc, a tool that we build to treat unikernels as containers and properly introduce unikernels to the cloud-native world! Essentially, urunc is a container runtime able to spawn unikernels that reside in container images. Before digging into the gory details, let us walk through some required concepts: unikernels, containers, and container runtimes.

Nov 14, 2023