Rootless container runtime with no daemon. Runs agent tool calls and LLM-generated code in kernel-enforced containers.
Rust434 stars10 forksApache-2.0 ai-agentscgroupscode-executioncode-interpretercontainer-runtimecontainersdaemonlessdockerdocker-alternativelinuxlinux-namespacesocioci-runtimeoverlayfspodmanrootlessrustsandboxseccompvirtualization