Minict is a minimal container runtime written in Go. It was made mainly for learning purposes and is intended to be as simple as possible.
It's main intention is to be easily understandable to anyone who wishes to read it's code and see what goes into running containers in famous runtimes such as Containerd and full container-running platforms like Docker.
Minict runs OCI standard images and supports pulling images from existing registries.
gpgme-develpackage must be installed on your system.
sudo dnf install gpgme-develon RHEL-based distros (RHEL, CentOS, Fedora, etc.)
sudo apt install libgpgme-devon Debian-based distros (Debian, Ubuntu, etc.)
- Either download the current binary from the releases page, or compile with the instuctions below.
- Once you have the executable, start using it with the help of the
Getting startedsection below or by running the executable with the
Building & Running
- Clone this repository into your
$HOME/go/srcdirectory and run
- Run the
- Run the
- You should now have a
minictexecutable in your directory. Run
chmod a+x minictand it can now be used.
- To use it from anywhere easily, move the
minictexecutable to a directory that is in yout
PATHvariable. One such directory should be
- Pulling an image:
sudo minict pull --image ubuntu:20.04
- Running a new container:
sudo minict run --image ubuntu:20.04 --name ubuntu-ctr
- Starting an existing container:
sudo minict start --name ubuntu-ctr
- Listing all images:
>>> sudo minict list-images [ "alpine:latest", "ubuntu:20.04" ]
- Listing all containers:
>>> sudo minict list-containers [ "container1", "container2", "alpine-ctr", "ubuntu-ctr" ]
- Removing an existing container:
sudo minict rm --name ubuntu-ctr
- Container management is entirely based on the filesystem, and no DBs or separate inventories are used.
- By default, minict will use the
/var/lib/minictdirectory for everything that it stores on disk. This can be changed by setting the
MINICT_DIRenvironment variable to a new location. For example:
sudo MINICT_DIR=/new/location minict pull --image alpine:3.11
Important Notes & Disclaimers:
- Since this is intended to be small and minimal project, only basic OCI settings are supported. Currently, minict supports the following features:
- Cmd / Entrypoint
- Env variables
- Mounts - Partial support, some mounts won't work and you might see mounting error when starting containers, but the basic mounts that are required for most containers are supported.
- All other OCI settings are ignored.
- Containers do not start with a networking namespace at the moment. While it is possible to add and there are existing Go libraries and tools to help make that easier, it will cause running containers to not be reachable without implementing more features like port mapping between the host and the containers and more, which is beyond the scope I set for this project at the moment.
- Minict is in NO way meant to be used in production. This is nothing more than a personal project and I take no responsibility for anything that using it might cause.
- While I tested this on my personal system and tried my best to cleanup everything once a container is removed, note that it does setup namespaces and mounts on the system, so for completely risk-free usage I'd suggest using it on a VM.
Sources & Other interesting projects
- Minict used the umoci tool to unpack images, and uses code that was inspired by skopeo to pull images. Check out those projects if you're interested in how its done. Plus they are both great tools in general.
- bocker is a projects that attmepts to implement Docker in ~100 lines of bash. Not directly related to this project but a cool one nonetheless that you might find interesting if you are interested in this one.