Kubernetes-in-Docker

There exist a few tools to run Kubernetes-in-Docker. However, due to limitations of the OCI runc, these use complex container images and very unsecure privileged containers. This removes flexibility and does not isolate the cluster properly from the host.

​

Sysbox removes both of these limitations, enabling you to deploy the cluster with simple images, using the configuration you want, and with proper isolation. 

This is very useful for development, testing, and CI/CD.

Lightweight VM

Sysbox makes it easy to use containers as lightweight VMs. For example, a container image can include systemd, ssh, a Docker daemon, preloaded inner container images, etc. You have full root access inside the container, but no capabilities outside of it. This voids the need to deploy slower, less efficient, and more costly VMs in many scenarios.

Docker-in-Docker

The concept of running the Docker daemon inside a container has been around for a while, but requires a customized container image and unsecure privileged containers.

​

Sysbox removes these limitations, enabling you to run Docker inside a container seamlessly and with strong isolation (Linux user namespace).

You can even preload inner container images into the outer container using a Dockerfile or Docker commit.

This is useful for Docker sandboxing, testing, and CI/CD. 

Legacy Apps 

Legacy apps may be lift-and-shifted into system containers, enabling them to operate within cloud-native frameworks without resorting to VMs. This voids the need for re-architecting such applications.

Simplicity

Avoid the need for complex Docker images, custom entrypoints, host volume mounts, etc., to run Docker or Kubernetes inside containers. Sysbox reduces this to simple Docker run commands with simple images.

Security

The containers deployed by Sysbox are strongly secured. You have root access in the container but no capabilities on the host. These containers enable you to run system workloads such as Docker and K8s, in total isolation from the host, and without resorting to unsecure privileged containers. 

Multi-cloud Agility

Use fast & efficient containers instead of slower & heavier VMs for many scenarios. Move them across clouds, in seconds.

Reduced Costs

Avoid the need to spawn costly VMs. For example, you can deploy multiple K8s clusters for testing within a single cloud VM, instead of paying for several VMs or even more expensive cloud-based K8s clusters.