Youki: A Rust Container Runtime
Shriira Press
A memory-safe OCI container runtime, written in Rust, that creates and runs Linux containers as a drop-in alternative to runc.
Welcome to Youki: A Rust Container Runtime.
Youki is a low-level container runtime — the program that actually turns an image and a configuration file into a running, isolated Linux process. It implements the Open Container Initiative runtime specification, which means high-level tools like Docker, containerd, and Kubernetes can hand it a bundle and ask it to create and run a container, exactly as they would with runc. What sets youki apart is that it is written in Rust rather than Go or C, giving it memory safety and a notably smaller, faster footprint while still reaching deep into the kernel to wire up namespaces, cgroups, capabilities, and seccomp. This book starts with the problem a runtime solves and where youki sits in the stack, then works through the OCI specification and the container bundle, youki's crate-based architecture, its distinctive three-process creation model, the isolation primitives it drives in the kernel, the create-start-kill-delete lifecycle, rootless containers, and finally how to run youki under Docker and containerd in practice. By the end you will understand not just how to use youki, but how a container is born.
This title is part of the ShriIra library and is free to read in full, right here — our small contribution to making world-class knowledge easy to reach.
A note on reading it: open the Contents menu at the top of the reader to jump between chapters, use the Aa menu to set a comfortable text size, theme (light, sepia, or night), and single- or two-page layout. Your place is saved automatically, so you can always pick up where you left off.
We hope it serves you well.
— Shriira Press