7 comments

  • sureglymop53 minutes ago
    I think the headline might be confusing because docker&#x2F;podman already have the concept of a runtime. E.g. you can pass `--runtime` to set it on the fly or set it in the config...<p>For example, I don&#x27;t use crun but a more security hardened runtime instead.
  • forty40 minutes ago
    Is anyone still using docker ? I&#x27;m surprised they don&#x27;t compare to podman &amp; all that I see used these days
  • cholindo2 hours ago
    My question is wether &quot;8x faster than docker&quot; means that containers run faster or that the tooling around them runs faster
    • d3Xt3r1 hour ago
      Expecially considering that pretty much every post-Docker container tech is &quot;faster&quot; than Docker. Docker is a pretty low bar these days IMO, it would&#x27;ve been better how Kiri compares to actual performant container runtimes like Podman, systemd-nspawn, incus etc.<p>And for macOS, the comparison should be done against Apple containers, OrbStack, Colima etc.
  • user-error3 hours ago
    My question, not clear from the front page, was if it runs faster on MacOS than colima with vz. Full benchmarks claim that it does.<p>So that&#x27;s interesting. The offering of container runtimes (also thin VMs in general) on MacOS has been improving a lot.
  • NewJazz3 hours ago
    I scrolled through and it just seems like yet another contaienr runtime.<p>Anhone want to convince me this isn&#x27;t just slopware?
    • jbverschoor3 hours ago
      Not sure, but the documentation is wrong. It’s not a (micro)VM per container. So it’s basically an Orbstack clone.
    • webstrand3 hours ago
      Seems to be specifically a desktop containers runtime for Mac written in Rust. It uses Nftables for networking on linux, too, unlike docker which is really nice.<p>Looking at the codebase this is either not majorly AI generated or the spent a lot of time cleaning up the tells I recognize, so I&#x27;d say not slop.
      • wavemode1 hour ago
        almost 200K lines of code materialized in about 2 weeks, and the code is full of em-dashes. if this wasn&#x27;t vibecoded, they sure tried their hardest to make it look like it was...
        • classified24 minutes ago
          &gt; 200K lines of code<p>And who is going to read all that to make sure it doesn&#x27;t contain malware?<p>I&#x27;m extremely loath these days to casually clone any repos from untrusted sources.
          • VMG2 minutes ago
            This problem has preceded llms by at least a decade
    • quaffcode3 hours ago
      Sure looks like it. Not sure any of the contributors on GH are even real people.
  • i_v1 hour ago
    Interesting! So based on architecture[1], the daemon responsible for container… scheduling(?) works directly with the VM. There&#x27;s no traditional init system. The &quot;guest agent&quot; is the initd (kind of a unikernel, huh?) so the overhead of spawning a container is as directly through the kernel syscalls as possible while the other bits happen on the macOS host?<p>The question I have is, does that mean Kiri implements its own entire container runtime or does it use containerd or some other runtime as its backend?<p>[1]: <a href="https:&#x2F;&#x2F;docs.runkiri.com&#x2F;features&#x2F;#what-runs-where" rel="nofollow">https:&#x2F;&#x2F;docs.runkiri.com&#x2F;features&#x2F;#what-runs-where</a>
  • ksajadi3 hours ago
    Excellent Persian name