runc

Docker Security Update: CVE-2019-5736 and Container Security Best Practices

Banjot Chanana
Feb 12 2019

On Monday, February 11, Docker released an update to fix a privilege escalation vulnerability (CVE-2019-5736) in runC, the Open Container Initiative (OCI) runtime specification used in Docker Engine and containerd. This vulnerability makes it possible for a malicious...

What is containerd ?

Michael Crosby
Aug 7 2017

We have done a few talks in the past on different features of containerd, how it was designed, and some of the problems that we have fixed along the way. Containerd is used by Docker, Kubernetes CRI, and a few other projects but this is a post for people who may not...

Moby Summit LA alongside Open Source Summit North America

Victor Coisne
Jul 12 2017

Since the Moby Project introduction at DockerCon 2017 in Austin last April, the Moby Community has been hard at work to further define the Moby project, improve its components (runC, containerd, LinuxKit, InfraKit, SwarmKit, Libnetwork and Notary) and fine...

Moby Summit June 2017 Recap

Patrick Chanezon
Jun 26 2017

On June 19 2017, 90 members of the Moby community gathered at Docker headquarter in San Francisco for the second Moby Summit. This was an opportunity for the community to discuss the progress and future of the Moby project, two months after it was announced. We...

containerd livestream recap

Victor Coisne
Jan 4 2017

In case you missed it last month, we announced that Docker is extracting a key component of its container platform, a part of the engine plumbing called containerd - a core container runtime – and committed to donating it to an open foundation. You can find...

containerd – a core container runtime project for the industry

Solomon Hykes
Dec 14 2016

Today Docker is spinning out its core container runtime functionality into a standalone component, incorporating it into a separate project called containerd, and will be donating it to a neutral foundation early next year. This is the latest chapter in a multi-year...

Docker 1.11: The first runtime built on containerd and based on OCI technology

Arnaud Porterie
Apr 13 2016

We are excited to introduce Docker Engine 1.11, our first release built on runC ™ and containerd ™. With this release, Docker is the first to ship a runtime based on OCI technology, demonstrating the progress the team...

Progress Report: Open Container Initiative

Michael Crosby
Dec 8 2015

Last June, we launched the Open Container Initiative, under the auspices of the Linux Foundation. The OCI was designed to collaborate on an open, standard container format and runtime in order to preserve that portability and interoperability for users. We’re very...

Introducing runC: a lightweight universal container runtime

Solomon Hykes
Jun 22 2015

Spinning Out Docker’s Plumbing: Part 1: Introducing runC On Infrastructure Plumbing To build a platform like Docker you need a lot of infrastructure plumbing; in fact over the past two years even though our code base has grown to tens of thousands of lines of code;...