runc
The facts below are what the maker publishes about runc, checked and dated. Our editors have not written about it yet.
The facts
Each one read from runc's own pages, with the date it was checked.
What it does
- Build features
- Build tags include seccomp syscall filtering, libpathrs path safety, and an option to disable checkpoint and restore.checked 8 Oct 2026
- Checkpoint and restore
- runc supports checkpoint and restore unless built with the runc_nocriu tag, which disables that feature.checked 8 Oct 2026
- Container format
- A container must be provided as an OCI bundle, and runc can generate a base configuration with its spec command.checked 8 Oct 2026
- Integrations
- The project documents using runc with Docker to prepare a root filesystem and with systemd or other process supervisors to manage containers.checked 8 Oct 2026
- Intended users
- The project describes runc as a low-level tool mostly used by higher-level container software, and does not recommend using it directly for most users.checked 8 Oct 2026
- License
- The code and documentation are released under the Apache 2.0 license.checked 8 Oct 2026
- Lifecycle
- runc can run a container with one command or manage it through separate create, start, list, and delete operations.checked 8 Oct 2026
- OCI bundles
- To use runc, a container must be provided in OCI bundle format.checked 8 Oct 2026
- Path safety
- The libpathrs build feature provides path safety and is enabled by default in the listed build tags.checked 8 Oct 2026
- Purpose
- runc is a command-line tool for spawning and running containers on Linux according to the OCI specification.checked 8 Oct 2026
- Release integrity
- The project says all official releases are signed by one of the keys listed in the repository's runc.keyring file.checked 8 Oct 2026
- Release signing
- The project says all official runc releases are signed by one of the keys listed in its repository keyring.checked 8 Oct 2026
- Rootless mode
- runc can run containers without root privileges when user namespaces are enabled in the kernel.checked 8 Oct 2026
- Security audit
- The project says a third-party security audit was performed by Cure53 and links to the report.checked 8 Oct 2026
- Security feature
- The project lists seccomp syscall filtering as a build feature enabled by default, using libseccomp.checked 8 Oct 2026
- Security reporting
- The OCI security policy directs vulnerability reports to [email protected] rather than GitHub issues or pull requests.checked 8 Oct 2026
Where it runs
- Platform limit
- The project states that runc only supports Linux.checked 8 Oct 2026
Alternatives to runc
- 1
LXD
Free planWebAPILinuxSelf-hosted7.0From $25 a year - 2
BuildKit
Free planAPILinuxmacOSSelf-hosted6.8Free plan - 3
Incus
Free planAPILinuxmacOSSelf-hosted6.8Free plan - 4
Apptainer
Free planAPILinuxmacOSSelf-hosted6.7Free plan - 5
crun
Free planLinuxSelf-hosted6.5Free plan - 6
Buildah
Free planAPILinuxSelf-hosted6.4Free plan