Kubernetes-in-Docker

Running Kubernetes clusters inside containers is very useful for development, testing, and CI/CD.

It avoids the need for heavy and costly VMs or cloud-based clusters.

​

There exist a few tools to run Kubernetes-in-Docker. However these use complex container images and very unsecure privileged containers. 

​

Nestybox fixes this, enabling you to deploy the cluster in containers using strong isolation and very simple container images that you fully control.

Lightweight VM

Sysbox makes it easy to use containers as lightweight VMs. For example, a container image can include systemd, ssh, a Docker daemon, preloaded inner container images, etc. You have full root access inside the container, but no capabilities outside of it.

You can pack 2x as many containers as VMs on the same machine and get the same performance. And you can provision them 10x faster than VMs.

Docker-in-Docker

It's often useful to run Docker inside a container for development, testing, and CI/CD.

​

Up to now, the only way to do this was to use very unsecure privileged containers or exposing the host's Docker socket into a container. Neither is ideal.

​

Nestybox removes these limitations, enabling you to run Docker inside a container with total isolation from the host.

You can even preload inner container images into the outer container using a Dockerfile or Docker commit.

Legacy Apps 

With Nestybox, legacy apps may be lift-and-shifted into  containers, enabling them to operate within cloud-native frameworks without resorting to VMs. This voids the need for re-architecting such applications.

Simplicity

Enable containers to run the same workloads as VMs without resorting to complex Docker images, custom entrypoints, host volume mounts, etc. 

​

With Nestybox this is as simple as "docker run --runtime=sysbox-runc".

Security

Sysbox voids the need for very unsecure privileged containers.

The containers deployed by Sysbox are strongly secured via the Linux User Namespace. You have root access in the container but no capabilities on the host. 

Multi-cloud Agility

Provision "VM-like" containers 10x as fast as VMs. 

​

And unlike VMs which are tied to a specific hypervisor or cloud provider, containers deployed with Sysbox run wherever Linux runs. Thus you can easily move them across clouds or devices in seconds.

Cost Reduction

Deploy 2x as many "VM-like"  containers as VMs on a server and get the same performance. This essentially reduces your hardware cost by 50%! See this blog article for more on this.