ironbox - Building a Container Runtime from Scratch in Rust
I built a container runtime. Not a wrapper around runc, not a shim that delegates to someone else’s code — an actual OCI runtime that uses fork, unshare, pivot_root, and mount directly. It’s called ironbox, and it’s on crates.io.