kern

A fast, rootless sandbox and virtual resource runtime for any workload, including untrusted and AI-generated code. Daemonless: a real, kernel-enforced container in ~3.5 ms from an OCI image, no daemon, one 1.52 MB static binary.

429 10

Apache-2.0

last commit 2026-08-24

ai-agents cgroups code-execution code-interpreter container-runtime containers daemonless docker docker-alternative linux

Website Source

About

a fast, rootless container runtime and sandbox with no daemon. It runs workloads, including agent tool calls and code generated by an LLM, in real containers enforced by the kernel.