Minict is a minimal container runtime written in Go. It was made mainly for learning purposes and is intended to be as simple as possible.
Its main intention is to be easily understandable to anyone who wishes to read its code and see what goes into running containers in famous runtimes such as Containerd and full container-running platforms like Docker.
Minict runs OCI standard images and supports pulling images from existing registries.
- The
gpgme-devel
package must be installed on your system.- Run
sudo dnf install gpgme-devel
on RHEL-based distros (RHEL, CentOS, Fedora, etc.) - Run
sudo apt install libgpgme-dev
on Debian-based distros (Debian, Ubuntu, etc.)
- Run
- Have
golang
andgit
installed.
- Either download the current binary from the releases page, or compile with the instuctions below.
- Once you have the executable, start using it with the help of the
Getting started
section below or by running the executable with the--help
or-h
flag.
- Clone this repository into your
$HOME/go/src
directory and runcd $HOME/go/src/minict
- Run the
go get
command. - Run the
go build
command. - You should now have a
minict
executable in your directory. Runchmod a+x minict
and it can now be used. - To use it from anywhere easily, move the
minict
executable to a directory that is in yourPATH
variable. One such directory should be/usr/bin
.
- Pulling an image:
sudo minict pull --image ubuntu:20.04
- Running a new container:
sudo minict run --image ubuntu:20.04 --name ubuntu-ctr
- Starting an existing container:
sudo minict start --name ubuntu-ctr
- Listing all images:
>>> sudo minict list-images
[
"alpine:latest",
"ubuntu:20.04"
]
- Listing all containers:
>>> sudo minict list-containers
[
"container1",
"container2",
"alpine-ctr",
"ubuntu-ctr"
]
- Removing an existing container:
sudo minict rm --name ubuntu-ctr
- Container management is entirely based on the filesystem, and no DBs or separate inventories are used.
- By default, minict will use the
/var/lib/minict
directory for everything that it stores on disk. This can be changed by setting theMINICT_DIR
environment variable to a new location. For example:
sudo MINICT_DIR=/new/location minict pull --image alpine:3.11
- Since this is intended to be small and minimal project, only basic OCI settings are supported. Currently, minict supports the following features:
- Cmd / Entrypoint
- Env variables
- Mounts - Partial support, some mounts won't work and you might see mounting error when starting containers, but the basic mounts that are required for most containers are supported.
- Hostname
- All other OCI settings are ignored.
- Containers do not start with a networking namespace at the moment. While it is possible to add and there are existing Go libraries and tools to help make that easier, it will cause running containers to not be reachable without implementing more features like port mapping between the host and the containers and more, which is beyond the scope I set for this project at the moment.
- Minict is in NO way meant to be used in production. This is nothing more than a personal project and I take no responsibility for anything that using it might cause.
- While I tested this on my personal system and tried my best to cleanup everything once a container is removed, note that it does setup namespaces and mounts on the system, so for completely risk-free usage I'd suggest using it on a VM.
- Minict used the umoci tool to unpack images, and uses code that was inspired by skopeo to pull images. Check out those projects if you're interested in how its done. Plus they are both great tools in general.
- bocker is a projects that attmepts to implement Docker in ~100 lines of bash. Not directly related to this project but a cool one nonetheless that you might find interesting if you are interested in this one.